<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="1107">
<package pkgid="0f8d5ec9f9c0467a6eda83d6019b89fc1b4776d01025605ef789cf6fac8b2245" name="NetworkManager" arch="aarch64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="5f41a2564c8c5c75805a32b79f2e08889c073d2b8c1909de4a3c84586473eab5" name="NetworkManager" arch="s390x">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="6a3df1d277ee82d9259c4f110d734d60c6a2fb4a502c67254ed8a5ac3615a075" name="NetworkManager" arch="src">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="653ebcd77c9122b9cff3a5567b1b9a47776317ed5c71efd52e8d50194e07c5b0" name="NetworkManager" arch="x86_64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="35641421e97eda2089458ff6be65a85dac457d7f100a2deeba3e5a2752333d83" name="NetworkManager-bluetooth" arch="aarch64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="c22fc1c46e01742a25f440d713f36b7ee5c08ab774c187651abf18c06ba1c6ea" name="NetworkManager-bluetooth" arch="s390x">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="938fe25f3adc316897c75898e6135c7756e3002d7929120368949aea1a3af781" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="b81fa123d4fe0916ff28973a838c653b4da8334abcd0605702acc6a650de232d" name="NetworkManager-cloud-setup" arch="aarch64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="36ceade5bdd52cc0c9c528f8967a4f61d9a0a70b0759d6636a507957fb5686e4" name="NetworkManager-cloud-setup" arch="s390x">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="701e172ee7ab2a53ea8421f89189157806cf388d8f01587dea812ee367b17942" name="NetworkManager-cloud-setup" arch="x86_64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="441bac4dc563ce9342d133a92a72c7cdaf228aa6eced9f45b9e46299f234e623" name="NetworkManager-pppoe" arch="aarch64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="bcb7d9b14ccbd82dcdd19007cfa26051a099deadbbb2138697a75dd42b140649" name="NetworkManager-pppoe" arch="s390x">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="285f6316b44b5ab10c6c49c36c39b1ebfb29707fd6f7da64298797b71d99773a" name="NetworkManager-pppoe" arch="x86_64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="48429d282632b77f1b20f7293df9e047325db9628e71a8bf82cba46c4169bd8b" name="NetworkManager-tui" arch="aarch64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="73a0d547c23cb849d8b7eaef33bd306b8cf6d95330cf0f03216fe588d3d49a3d" name="NetworkManager-tui" arch="s390x">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="2c3e5d0ad48d4a144a3c556930b50008d4acccb700d964745fb14f177e8f92f5" name="NetworkManager-tui" arch="x86_64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="ec3830cdb929c96c0464e33546c4207fcfa76cb441754e13052b8e01908f5dda" name="NetworkManager-wwan" arch="aarch64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="5ea2bdc6a26e7181a036ab39ddf51b19419a96a62d1067e1c4490a775fe6358c" name="NetworkManager-wwan" arch="s390x">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="b38f6c5a1f9486f176092393ac3746e5e1c5baaecf2747f08965df1b4f4b76b1" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="f7b5fbbea0660dfb07d9d48fc18ede4554ef54097e861bc808ef3fd44908bcd4" name="audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="ca7c1876560637d148b184b8fc5f374aa6be375e9eb4b35250582cca39b37b44" name="audit" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="5ad9e23d83bafa093f98d0e771d5d108ff734cff6c5db40f092960f68799bc35" name="audit" arch="src">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="04a80f48d1c763c169d388d78c77f61ca32ddc7599c0e99fa870ace0643b49e4" name="audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="99bd839961c13e3c94693c256b4b3ede2c15dbaac88723c9666650e2656ac20c" name="audit-audispd-plugins" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="2c06ada0068df07438fbe19307f87598f85a06deb62be516e620d56647b54812" name="audit-audispd-plugins" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="2385df899829618e17bc21ff8cf8c1a8a7c1a67f3b925d36aaa66445ecf6aafb" name="audit-audispd-plugins" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="d8a0bcc54c1b3565dcd21bf0712a99469bedf1636a5f4e6656063d8cae1a09fc" name="audit-secondary" arch="src">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="37872443688e17a8abbfe0183af77ddf9bd8d5074bd5d88273cda41455e6957c" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="6ff0727b34ea5025d0e54e55664913b29ba5c29e5089d8f06b06dba12eea0003" name="avahi" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="a9f6b999deb29daba9d22da41aab1737a552eb0db7d8e304a9b50eca3abf0f81" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="3f04504b447d38f9758c0c00f6884b47339ee4178beecc14b74663e88ff3e158" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="b302be17cd24786cabf1a50abae29cfe8e162f041e5ad4eb4e9a62fd1a06384a" name="aws-cli" arch="noarch">
  <version epoch="0" ver="1.27.89" rel="150200.30.11.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1662033600">- Update to version 1.25.64
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.64/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1663156800">- Update to version 1.25.72
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.72/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1663675200">- Update to version 1.25.76
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.76/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1664884800">- Update to version 1.25.85
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.85/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666008000">- Update to version 1.25.91
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.91/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666699200">- Update to version 1.26.0
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.26.0/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667476800">- Update in SLE-15 (bsc#1204537, jsc#PED-2333)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667563200">- Update to version 1.27.2
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.2/CHANGELOG.rst
- Relax upper version constraint for python-colorama in
  BuildRequires and Requires to 0.5.0 (bsc#1204917)
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1668427200">- Update to version 1.27.8
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.8/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669982400">- Update to version 1.27.21
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.21/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1670587200">- Update to version 1.27.26
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.26/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1672747200">- Update to version 1.27.41
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.41/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674216000">- Update to version 1.27.52
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.52/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674820800">- Update to version 1.27.58
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.58/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675425600">- Update to version 1.27.60
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.60/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675857600">- Update to version 1.27.66
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.66/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1676462400">- Update to version 1.27.71
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.71/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677240000">- Update to version 1.27.78
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.78/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1678708800">- Update to version 1.27.89
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.89/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680696000">- Update in SLE-15 (bsc#1209255, jsc#PED-3780)</changelog>
</package>
<package pkgid="e421d78cc0d15bb889b57be438104e37bc0a10ef751f20278225009af495847d" name="aws-cli" arch="src">
  <version epoch="0" ver="1.27.89" rel="150200.30.11.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1662033600">- Update to version 1.25.64
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.64/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1663156800">- Update to version 1.25.72
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.72/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1663675200">- Update to version 1.25.76
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.76/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1664884800">- Update to version 1.25.85
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.85/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666008000">- Update to version 1.25.91
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.91/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666699200">- Update to version 1.26.0
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.26.0/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667476800">- Update in SLE-15 (bsc#1204537, jsc#PED-2333)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667563200">- Update to version 1.27.2
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.2/CHANGELOG.rst
- Relax upper version constraint for python-colorama in
  BuildRequires and Requires to 0.5.0 (bsc#1204917)
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1668427200">- Update to version 1.27.8
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.8/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669982400">- Update to version 1.27.21
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.21/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1670587200">- Update to version 1.27.26
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.26/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1672747200">- Update to version 1.27.41
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.41/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674216000">- Update to version 1.27.52
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.52/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674820800">- Update to version 1.27.58
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.58/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675425600">- Update to version 1.27.60
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.60/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675857600">- Update to version 1.27.66
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.66/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1676462400">- Update to version 1.27.71
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.71/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677240000">- Update to version 1.27.78
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.78/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1678708800">- Update to version 1.27.89
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.89/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680696000">- Update in SLE-15 (bsc#1209255, jsc#PED-3780)</changelog>
</package>
<package pkgid="5a4a5a53fb0a867555579fe9aba3f286cefd3ab0005d0f550e95a1c372676a9a" name="bluez" arch="src">
  <version epoch="0" ver="5.62" rel="150400.4.13.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="9564dd456dd073ef4321deec412458007d3eee122de6a146b51a3848ccd2cb65" name="c-ares" arch="src">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="38d675c4421a02c20e5e9a84831a8fa7e562572329aabbcb1901ac230a18d909" name="ceph" arch="src">
  <version epoch="0" ver="16.2.11.58+g38d6afd3b78" rel="150400.3.6.1"/>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build
  + (bsc#1188911) OSD marked down causes wrong backfill_toofull</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
</package>
<package pkgid="642bbf709f4fab9cd2d20a531d5d4ccb7a08f97c5ae6f2b36d52997ca9080e82" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.7" rel="150000.25.8.1"/>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
</package>
<package pkgid="2e5776465308c22866c8dfff728f40cd7e3765c8f010e5ec4e56318bbf49d29a" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.7" rel="150000.25.8.1"/>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
</package>
<package pkgid="3b6614955ba1a3ff5bac523d175db8e87e0c5ddf86f734aa007d17c9a93ffa31" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.7" rel="150000.25.8.1"/>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
</package>
<package pkgid="9da208928adb8feb399e9306f12693f036df98d8549fb7b54bdf412e47f4851e" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.7" rel="150000.25.8.1"/>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
</package>
<package pkgid="0da5948d2c61c55e5da62261227ba62bec64153352e27a25ddc4ae6c46157368" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.7" rel="150000.25.8.1"/>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
</package>
<package pkgid="684b414ee3eecc09331c2eb97925f3d412c95f8184b06dd2b3b75dbd9463b3a3" name="cloud-netconfig-gce" arch="src">
  <version epoch="0" ver="1.7" rel="150000.25.8.1"/>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
</package>
<package pkgid="a7c8fca509d3dac31d43461e0b7c8b241fee7494d9f9f9c1b28213f6909a0c2e" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.1.2" rel="150000.6.96.1"/>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
</package>
<package pkgid="7d30ecdc55697d544fc663b9eba0f6768332091218b25163abf8a15270fd69d4" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.1.2" rel="150000.6.96.1"/>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
</package>
<package pkgid="67dd506200cfb843d0a1c0caadd9bea9e9935615b2302195fb80ef73b81ffba0" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.96.1"/>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
</package>
<package pkgid="36c9e539e2bfc1729ac1c54f973605d0a2999652e39d3c9e1c257ab46d8a1e13" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.96.1"/>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
</package>
<package pkgid="b1751925018b92f72c7a0a702eac4b1549bc3929454251050e766e0d7ddd281a" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.96.1"/>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
</package>
<package pkgid="98dd598672e9d7f80ab43e2dd3ffedd9d7b8b71fbaba7a8cc30aa41770a7aff0" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="150000.6.96.1"/>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
</package>
<package pkgid="9f03872c6e3680683447119d408b5992d2a97ff0f1be5dc86297ead1893368ec" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.96.1"/>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
</package>
<package pkgid="f4dfca6ae31622b2193af8b76100754380cb86877fcf7067b0d41bfbd1b8477c" name="cni" arch="aarch64">
  <version epoch="0" ver="0.7.1" rel="150100.3.10.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="aee73bbdb757accfe7c9bb39c7cd679aa8161c22f4d9e7d0b926ff28bf7d537f" name="cni" arch="s390x">
  <version epoch="0" ver="0.7.1" rel="150100.3.10.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="154f4a3729b4ff89abf3ffbf3efcce346553d7c20289e78d1c61165ba49f698c" name="cni" arch="src">
  <version epoch="0" ver="0.7.1" rel="150100.3.10.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="e40b84194eae3104961fca4be15a4f6d85d4425781be0ba10765dba7e64ea4ca" name="cni" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="150100.3.10.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="eb723a2aebd7c654b9f08c9abf9a24d8ee8e5a27aae688e0ed33b7e5da7f9d75" name="cni" arch="aarch64">
  <version epoch="0" ver="0.7.1" rel="150100.3.12.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="8c23e250fa0e10bbac3a345f14b8068989ca1e51ddd001ab55f28e09d47a92ac" name="cni" arch="s390x">
  <version epoch="0" ver="0.7.1" rel="150100.3.12.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="8fbb3426bcf840fda8f631dd3cc0f5820b9a95d90a80e4aafecefec8db9c3d2f" name="cni" arch="src">
  <version epoch="0" ver="0.7.1" rel="150100.3.12.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="0c57b61b9e75abe17909187ba79bab5a96cc15bfb494c27f4e0fc652a9abfc7a" name="cni" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="150100.3.12.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="36e1863a76d4b160ab89aea80f65d53feb23ff8bbb6a6c52bc7a9d42357e16a9" name="cni-plugins" arch="aarch64">
  <version epoch="0" ver="0.8.6" rel="150100.3.13.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="280445f6da2515ec4ec270a556cf7ef53f3c6d3f4714d9ab6ac088e70bf255ed" name="cni-plugins" arch="s390x">
  <version epoch="0" ver="0.8.6" rel="150100.3.13.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="94493ed82f44c037ae73dacf0b240588451e7373cc15e80d8cd98e3a00255f36" name="cni-plugins" arch="src">
  <version epoch="0" ver="0.8.6" rel="150100.3.13.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="389eac93836f03baf3262cabab517d17aef5354037bf4328b95320e43ed2ad23" name="cni-plugins" arch="x86_64">
  <version epoch="0" ver="0.8.6" rel="150100.3.13.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="2a252bdbde1ee734e5d41c2141cfb09b4971a128a2cbfd091872d5dbd96cedb7" name="cni-plugins" arch="aarch64">
  <version epoch="0" ver="0.8.6" rel="150100.3.15.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="117ae4e7bf328befdd110e46f8870b42cf9211d587b6f79cba6efc0c38e55bd9" name="cni-plugins" arch="s390x">
  <version epoch="0" ver="0.8.6" rel="150100.3.15.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="1cdf6a82daad14ead64ce0f1191a0a9389018a84f8c159702b2acb8a51797d0a" name="cni-plugins" arch="src">
  <version epoch="0" ver="0.8.6" rel="150100.3.15.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="fa0797d89804555ba9f0b311acba276892e7001008e72d293677c278f1a8bc7e" name="cni-plugins" arch="x86_64">
  <version epoch="0" ver="0.8.6" rel="150100.3.15.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="0e13c965b78537d7f812728aa5aae93e012bfaec082b5eae72f835bacb5d7a1d" name="conmon" arch="aarch64">
  <version epoch="0" ver="2.1.5" rel="150400.3.6.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- build against go 1.19 [bsc#1209307]</changelog>
</package>
<package pkgid="bd86a240018cdbe11e6ac0a89e793a0bb9e3370e873efaaea4c5b79d62217db5" name="conmon" arch="s390x">
  <version epoch="0" ver="2.1.5" rel="150400.3.6.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- build against go 1.19 [bsc#1209307]</changelog>
</package>
<package pkgid="27354e0be07bb810f7eb4a581be9ffe70704345903782123692d084e0f4f7759" name="conmon" arch="src">
  <version epoch="0" ver="2.1.5" rel="150400.3.6.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- build against go 1.19 [bsc#1209307]</changelog>
</package>
<package pkgid="41ec4866587b87a483ee3268cfe25e64cac1ca445e70890f35a3e9fa9bc74c88" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.1.5" rel="150400.3.6.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- build against go 1.19 [bsc#1209307]</changelog>
</package>
<package pkgid="91362baa2ad1de434b9ebc79c7c35ad438f2bdd373b2d69345967e9678dbe073" name="conmon" arch="aarch64">
  <version epoch="0" ver="2.1.5" rel="150400.3.8.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- build against go 1.19 [bsc#1209307]</changelog>
</package>
<package pkgid="7424558e6b1b3e62dbb0a88a182ae09086a2b94ab487340f3ce8cd6176059cbb" name="conmon" arch="s390x">
  <version epoch="0" ver="2.1.5" rel="150400.3.8.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- build against go 1.19 [bsc#1209307]</changelog>
</package>
<package pkgid="bbcea6df9a0c8912b4ee4a0d275af92402556ce3ad0f90a6a3506c85b1ea45df" name="conmon" arch="src">
  <version epoch="0" ver="2.1.5" rel="150400.3.8.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- build against go 1.19 [bsc#1209307]</changelog>
</package>
<package pkgid="56fcb0c48b19f7441859a046cbfc063092a4fc904cbe1b19351c04a7b9b2f045" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.1.5" rel="150400.3.8.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- build against go 1.19 [bsc#1209307]</changelog>
</package>
<package pkgid="5bfcb5a35cb7703708ec148b3ded43b239b616d5798dd5f6a510fc5e0cbf98db" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.6.19" rel="150000.90.3"/>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="meissner@suse.com" date="1683201600">- unversion to golang requires to always use the current default go. (bsc#1210298)</changelog>
</package>
<package pkgid="c7a3173f92a5880f1f23669685b2e1d863e221f9304e7ba0d8f035a86574b4d9" name="containerd" arch="s390x">
  <version epoch="0" ver="1.6.19" rel="150000.90.3"/>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="meissner@suse.com" date="1683201600">- unversion to golang requires to always use the current default go. (bsc#1210298)</changelog>
</package>
<package pkgid="d0022130cfee32be1b4c3bbe37ac7f4741721ea40171791926727e5a727adc6a" name="containerd" arch="src">
  <version epoch="0" ver="1.6.19" rel="150000.90.3"/>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="meissner@suse.com" date="1683201600">- unversion to golang requires to always use the current default go. (bsc#1210298)</changelog>
</package>
<package pkgid="0bbe8999f88ec64aa9cd9d5ebc673367ac7b8f0d18b3aa411d41cd5727bbe4a2" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.6.19" rel="150000.90.3"/>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="meissner@suse.com" date="1683201600">- unversion to golang requires to always use the current default go. (bsc#1210298)</changelog>
</package>
<package pkgid="35452e92397a66e960a20753fa4d159fc53ee649a65e76254134d08cf1964a96" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="6e2b23cc362cfcec84792bb3bf2a90cdf5104d5f267d5eb8dc724146278249cf" name="containerd" arch="s390x">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="a9502efb0fb280c7a99422748f26ce7386399f19646e094e67e2c0c010efceec" name="containerd" arch="src">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="ba167df73b6f5f67237d27f7d90e55a3e869077953aa9537b2fb56756e433e5e" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="a28e6a4c5d4b5e275062215504db1194d95fc9f245a858278652affa8cefde10" name="containerized-data-importer" arch="src">
  <version epoch="0" ver="1.51.0" rel="150400.4.13.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1619006400">- Preparation for submission to SLE15 SP2
  jsc#SLE-11089 jsc#ECO-3633</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697600">- Set default reg_path='registry.opensuse.org/kubevirt'
- Add _constraints file with disk requirements
- Drop CDI_VERSION env var since its not used during the build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697601">- Include release number into docker tag
- Add cdi_containers_meta build service</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512000">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512001">- Update to version 1.34.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.34.0</changelog>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1666008000">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1677844800">- Use recent golang compiler (bsc#1208916)</changelog>
</package>
<package pkgid="8cf453d2215e0a85443cdbdbbe99350262d8c7b3a65307e675a9d1bf9c0267f2" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.51.0" rel="150400.4.13.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1619006400">- Preparation for submission to SLE15 SP2
  jsc#SLE-11089 jsc#ECO-3633</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697600">- Set default reg_path='registry.opensuse.org/kubevirt'
- Add _constraints file with disk requirements
- Drop CDI_VERSION env var since its not used during the build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697601">- Include release number into docker tag
- Add cdi_containers_meta build service</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512000">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512001">- Update to version 1.34.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.34.0</changelog>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1666008000">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1677844800">- Use recent golang compiler (bsc#1208916)</changelog>
</package>
<package pkgid="60918d773ae6782c6b1888bf104b1fd10e97346fabaf1618c36361f94c4dbdaa" name="cpupower" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150400.3.3.1"/>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1674129600">- Originally by aabdallah@suse.com:
  Don't exist if perf is unavailable.
  * Fix for SG#64023, bsc#1202890:
  A turbostat-Dont-exist-if-perf-is-unavailable.patch:</changelog>
</package>
<package pkgid="dc18135692211b5fbf0c2a1e7fdafe0e088196537fb791fd6845bd35b44e6ca8" name="cpupower" arch="s390x">
  <version epoch="0" ver="5.14" rel="150400.3.3.1"/>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1674129600">- Originally by aabdallah@suse.com:
  Don't exist if perf is unavailable.
  * Fix for SG#64023, bsc#1202890:
  A turbostat-Dont-exist-if-perf-is-unavailable.patch:</changelog>
</package>
<package pkgid="51a983a12a0eaa0765c10c702a8b92fcf40b8c53345bdf4f8e45a8b2f03616cb" name="cpupower" arch="src">
  <version epoch="0" ver="5.14" rel="150400.3.3.1"/>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1674129600">- Originally by aabdallah@suse.com:
  Don't exist if perf is unavailable.
  * Fix for SG#64023, bsc#1202890:
  A turbostat-Dont-exist-if-perf-is-unavailable.patch:</changelog>
</package>
<package pkgid="1bc8e9bfd7270556fe3058c08095befea62df36929bb029c8b138be79200a9c4" name="cpupower" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150400.3.3.1"/>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1674129600">- Originally by aabdallah@suse.com:
  Don't exist if perf is unavailable.
  * Fix for SG#64023, bsc#1202890:
  A turbostat-Dont-exist-if-perf-is-unavailable.patch:</changelog>
</package>
<package pkgid="f3c76c70c1fc36fab856e51e75424391a3eea0cc6b2cd6442ab016c22af2663c" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="f5eb3c9b5bd854918010ac04be2fadd97ef7e08f70cb677b5a8f754d8d96f073" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="69ac06682a00fc337756db82098c42650398dbd95b9aaf7ddbad7799e630bfd1" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="d9ed50be9bc669fda86875b763ad24c8b74d24064aab9883691855165c317efc" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="32026d0981feab396d4a236db6027d4fc4c83b74197d2e3368a007b7e71218dc" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="485f14f7ebd052e1d9c59fc7c245b0c5e080a99e0ca74f5403bf0992054522a4" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="68d5fd6c2812972f8fffee22e8cbff0c9e711935943a9cd736fae54ad60673cf" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="2ba6f6eab833ac17f012a6b8596f03ceb222dc9967114c96c612d1cd7fe2a04a" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="9e9cf3056d28ac5495f1cb882badcbefe3fabb63f2a5473b345b2a724544cfff" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="ce79e4f5d90cffa80512a461c85c389284797b6f97ea0ceda0a6e453a7d7f346" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="7898863fe05570841ec19ee3e1b3335e975fe6a312f6f1418e0d221b4a00af13" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="3a916d994cb241620c50f2c260fd977371ef8bb4467e0486d5f029debf705b2a" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="e61f0c750c4fe2ee96d3a7b1633583195649ed4931125bd6072a2df3c3380f60" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="9f7e2eddf4af6da355526291587f23ee18130a50617b53ed641e159c4ebfa6bd" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="f517b25bd293c33fc2a5f413f43b1feaac5cddbc5f91d581ed09c5b69e6804e4" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="da0e11e8264d0058535682028147c9cea2c6f62c4410050735a8eb89ae6ce7da" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="ad1292f56a736615966fe3397c19614b0a7b63698dc5e011f5aad9d992494b2d" name="dbus-1" arch="aarch64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="fe6e44a2a6d7a6047b9a04b586c6b2ea1fe9b714debdf40ff1e10eb0cb01f72c" name="dbus-1" arch="s390x">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="0cb21701418d395d26dc6126959c4d5ec1398971bf516d3a372f115cd03b270f" name="dbus-1" arch="src">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="81eca7628d55103f672bdc6280fb3d4c2f8dd1e8e1897aa54fb5066bf4742eb3" name="dbus-1" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="65cc29b118ac2e881fdd6f2f0e21bf421691e782090f0a71eb4c6cb733323b8a" name="dbus-1-x11" arch="aarch64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="84ef5bf577e2fb42a3ee0e4c848000265d015c1ce55a85cff864a16ed169e98f" name="dbus-1-x11" arch="s390x">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="bf6d851c5b0896035a55bad81574220a9ec277c072b694c4fc445386528ea5fe" name="dbus-1-x11" arch="src">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="5e1da8f2dea5f0517bda6b62271b1a6e41e19a13ef544fd53d312c618b64fb23" name="dbus-1-x11" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="d3897b534d0f3141e6f4bdd186673a9270ce908d7bf1afbab48476e7e8f461ba" name="dmidecode" arch="aarch64">
  <version epoch="0" ver="3.4" rel="150400.16.8.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="jdelvare@suse.de" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="jdelvare@suse.de" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1663070400">- Update to upstream version 3.4:
  * This update implements jsc#SLE-24502 and jsc#PED-1466.
  * [COMPATIBILITY] Document how the UUID fields are interpreted.
  * [PORTABILITY] Don't use memcpy on /dev/mem on arm64.
  * Support for SMBIOS 3.4.0. This includes new memory device types, new
    processor upgrades, new slot types and characteristics, decoding of memory
    module extended speed, new system slot types, new processor characteristics
    and new format of Processor ID.
  * Support for SMBIOS 3.5.0. This includes new processor upgrades, BIOS
    characteristics, new slot characteristics, new on-board device types, new
    pointing device interface types, and a new record type (type 45 -
    Firmware Inventory Information).
  * Decode HPE OEM records 194, 199, 203, 236, 237, 238 ans 240.
  * Bug fixes:
    Fix OEM vendor name matching
  * Minor improvements:
    Add bios-revision, firmware-revision and system-sku-number to -s option
    Use the most appropriate unit for cache size
    Decode system slot base bus width and peers
    Skip details of uninstalled memory modules
    Don't display the raw CPU ID in quiet mode
    Improve the formatting of the manual pages
  * Obsoletes dmidecode-add-enumerated-values-from-smbios-3.3.0.patch,
    dmidecode-add-logical-non-volatile-device.patch,
    dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
    dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
    dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
    dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
    dmidecode-add-system-slot-types-from-smbios-3.4.0.patch,
    dmidecode-fix-formatting-of-tpm-table-output.patch,
    dmidecode-fix-redfish-hostname-print-length.patch,
    dmidecode-fix-system-slot-information-for-pcie-ssd.patch,
    dmidecode-missing-commas.patch,
    dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch and
    dmidecode-skip-details-of-uninstalled-memory-modules.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1663070401">2 recommended fixes from upstream:
- news-fix-typo.patch: We ship the NEWS file so avoid including a
  typo in it.
- dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch: Passing
  NULL to a %s printf conversion specifier is illegal, and can
  result in a segmentation fault. Current version of glibc doesn't
  mind, but alternative, past or future libc implementations could
  crash, so let's fix it.</changelog>
  <changelog author="jdelvare@suse.de" date="1681473600">Security fixes (CVE-2023-30630)
- dmidecode-split-table-fetching-from-decoding.patch: dmidecode:
  Clean up function dmi_table so that it does only one thing
  (bsc#1210418).
- dmidecode-write-the-whole-dump-file-at-once.patch: When option
  - -dump-bin is used, write the whole dump file at once, instead of
  opening and closing the file separately for the table and then
  for the entry point (bsc#1210418).
- dmidecode-do-not-let-dump-bin-overwrite-an-existing-file.patch:
  Make sure that the file passed to option --dump-bin does not
  already exist (bsc#1210418).
- ensure-dev-mem-is-a-character-device-file.patch: Add a safety
  check on the type of the mem device file we are asked to read
  from, if we are root (bsc#1210418).
  3 recommended fixes from upstream:
- dmioem-typo-fix-virutal-virtual.patch: Simple typo fix in a
  user-visible string.
- dmidecode-fortify-entry-point-length-checks.patch: Ensure that
  the SMBIOS entry point is long enough to include all the fields
  we need.
- dmioem-hpe-oem-record-237-firmware-change.patch: Properly decode
  the last field of HPE OEM record type 237.</changelog>
  <changelog author="jdelvare@suse.de" date="1681905600">- use-read_file-to-read-from-dump.patch: Fix an old harmless bug
  which would prevent root from using the --from-dump option since
  the latest security fixes (bsc#1210418).</changelog>
</package>
<package pkgid="d776817064e0fdd8f7f67c380f4231fe380ad400064bfb1100d6f1821af27bce" name="dmidecode" arch="src">
  <version epoch="0" ver="3.4" rel="150400.16.8.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="jdelvare@suse.de" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="jdelvare@suse.de" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1663070400">- Update to upstream version 3.4:
  * This update implements jsc#SLE-24502 and jsc#PED-1466.
  * [COMPATIBILITY] Document how the UUID fields are interpreted.
  * [PORTABILITY] Don't use memcpy on /dev/mem on arm64.
  * Support for SMBIOS 3.4.0. This includes new memory device types, new
    processor upgrades, new slot types and characteristics, decoding of memory
    module extended speed, new system slot types, new processor characteristics
    and new format of Processor ID.
  * Support for SMBIOS 3.5.0. This includes new processor upgrades, BIOS
    characteristics, new slot characteristics, new on-board device types, new
    pointing device interface types, and a new record type (type 45 -
    Firmware Inventory Information).
  * Decode HPE OEM records 194, 199, 203, 236, 237, 238 ans 240.
  * Bug fixes:
    Fix OEM vendor name matching
  * Minor improvements:
    Add bios-revision, firmware-revision and system-sku-number to -s option
    Use the most appropriate unit for cache size
    Decode system slot base bus width and peers
    Skip details of uninstalled memory modules
    Don't display the raw CPU ID in quiet mode
    Improve the formatting of the manual pages
  * Obsoletes dmidecode-add-enumerated-values-from-smbios-3.3.0.patch,
    dmidecode-add-logical-non-volatile-device.patch,
    dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
    dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
    dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
    dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
    dmidecode-add-system-slot-types-from-smbios-3.4.0.patch,
    dmidecode-fix-formatting-of-tpm-table-output.patch,
    dmidecode-fix-redfish-hostname-print-length.patch,
    dmidecode-fix-system-slot-information-for-pcie-ssd.patch,
    dmidecode-missing-commas.patch,
    dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch and
    dmidecode-skip-details-of-uninstalled-memory-modules.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1663070401">2 recommended fixes from upstream:
- news-fix-typo.patch: We ship the NEWS file so avoid including a
  typo in it.
- dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch: Passing
  NULL to a %s printf conversion specifier is illegal, and can
  result in a segmentation fault. Current version of glibc doesn't
  mind, but alternative, past or future libc implementations could
  crash, so let's fix it.</changelog>
  <changelog author="jdelvare@suse.de" date="1681473600">Security fixes (CVE-2023-30630)
- dmidecode-split-table-fetching-from-decoding.patch: dmidecode:
  Clean up function dmi_table so that it does only one thing
  (bsc#1210418).
- dmidecode-write-the-whole-dump-file-at-once.patch: When option
  - -dump-bin is used, write the whole dump file at once, instead of
  opening and closing the file separately for the table and then
  for the entry point (bsc#1210418).
- dmidecode-do-not-let-dump-bin-overwrite-an-existing-file.patch:
  Make sure that the file passed to option --dump-bin does not
  already exist (bsc#1210418).
- ensure-dev-mem-is-a-character-device-file.patch: Add a safety
  check on the type of the mem device file we are asked to read
  from, if we are root (bsc#1210418).
  3 recommended fixes from upstream:
- dmioem-typo-fix-virutal-virtual.patch: Simple typo fix in a
  user-visible string.
- dmidecode-fortify-entry-point-length-checks.patch: Ensure that
  the SMBIOS entry point is long enough to include all the fields
  we need.
- dmioem-hpe-oem-record-237-firmware-change.patch: Properly decode
  the last field of HPE OEM record type 237.</changelog>
  <changelog author="jdelvare@suse.de" date="1681905600">- use-read_file-to-read-from-dump.patch: Fix an old harmless bug
  which would prevent root from using the --from-dump option since
  the latest security fixes (bsc#1210418).</changelog>
</package>
<package pkgid="3c4e3228ca3109c8154f3d1002f9478f7d8e7cbd72ed356780ede6d81f249019" name="dmidecode" arch="x86_64">
  <version epoch="0" ver="3.4" rel="150400.16.8.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="jdelvare@suse.de" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="jdelvare@suse.de" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1663070400">- Update to upstream version 3.4:
  * This update implements jsc#SLE-24502 and jsc#PED-1466.
  * [COMPATIBILITY] Document how the UUID fields are interpreted.
  * [PORTABILITY] Don't use memcpy on /dev/mem on arm64.
  * Support for SMBIOS 3.4.0. This includes new memory device types, new
    processor upgrades, new slot types and characteristics, decoding of memory
    module extended speed, new system slot types, new processor characteristics
    and new format of Processor ID.
  * Support for SMBIOS 3.5.0. This includes new processor upgrades, BIOS
    characteristics, new slot characteristics, new on-board device types, new
    pointing device interface types, and a new record type (type 45 -
    Firmware Inventory Information).
  * Decode HPE OEM records 194, 199, 203, 236, 237, 238 ans 240.
  * Bug fixes:
    Fix OEM vendor name matching
  * Minor improvements:
    Add bios-revision, firmware-revision and system-sku-number to -s option
    Use the most appropriate unit for cache size
    Decode system slot base bus width and peers
    Skip details of uninstalled memory modules
    Don't display the raw CPU ID in quiet mode
    Improve the formatting of the manual pages
  * Obsoletes dmidecode-add-enumerated-values-from-smbios-3.3.0.patch,
    dmidecode-add-logical-non-volatile-device.patch,
    dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
    dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
    dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
    dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
    dmidecode-add-system-slot-types-from-smbios-3.4.0.patch,
    dmidecode-fix-formatting-of-tpm-table-output.patch,
    dmidecode-fix-redfish-hostname-print-length.patch,
    dmidecode-fix-system-slot-information-for-pcie-ssd.patch,
    dmidecode-missing-commas.patch,
    dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch and
    dmidecode-skip-details-of-uninstalled-memory-modules.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1663070401">2 recommended fixes from upstream:
- news-fix-typo.patch: We ship the NEWS file so avoid including a
  typo in it.
- dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch: Passing
  NULL to a %s printf conversion specifier is illegal, and can
  result in a segmentation fault. Current version of glibc doesn't
  mind, but alternative, past or future libc implementations could
  crash, so let's fix it.</changelog>
  <changelog author="jdelvare@suse.de" date="1681473600">Security fixes (CVE-2023-30630)
- dmidecode-split-table-fetching-from-decoding.patch: dmidecode:
  Clean up function dmi_table so that it does only one thing
  (bsc#1210418).
- dmidecode-write-the-whole-dump-file-at-once.patch: When option
  - -dump-bin is used, write the whole dump file at once, instead of
  opening and closing the file separately for the table and then
  for the entry point (bsc#1210418).
- dmidecode-do-not-let-dump-bin-overwrite-an-existing-file.patch:
  Make sure that the file passed to option --dump-bin does not
  already exist (bsc#1210418).
- ensure-dev-mem-is-a-character-device-file.patch: Add a safety
  check on the type of the mem device file we are asked to read
  from, if we are root (bsc#1210418).
  3 recommended fixes from upstream:
- dmioem-typo-fix-virutal-virtual.patch: Simple typo fix in a
  user-visible string.
- dmidecode-fortify-entry-point-length-checks.patch: Ensure that
  the SMBIOS entry point is long enough to include all the fields
  we need.
- dmioem-hpe-oem-record-237-firmware-change.patch: Properly decode
  the last field of HPE OEM record type 237.</changelog>
  <changelog author="jdelvare@suse.de" date="1681905600">- use-read_file-to-read-from-dump.patch: Fix an old harmless bug
  which would prevent root from using the --from-dump option since
  the latest security fixes (bsc#1210418).</changelog>
</package>
<package pkgid="f4c350424211a3f43714ff0c4157e6fb645e81a937bfc1a224858aa1ca15b5f6" name="docker" arch="aarch64">
  <version epoch="0" ver="20.10.23_ce" rel="150000.175.1"/>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
</package>
<package pkgid="7b55121370751c530f06a41ecf9b7f06a320b620691ae26a6eb15c90a47cf347" name="docker" arch="s390x">
  <version epoch="0" ver="20.10.23_ce" rel="150000.175.1"/>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
</package>
<package pkgid="ca05523d844fd47448e5c0b7c8fb3464e59ad2c1830cd1183202b480968dd6c6" name="docker" arch="src">
  <version epoch="0" ver="20.10.23_ce" rel="150000.175.1"/>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
</package>
<package pkgid="980f4a5c1b6e58a388199575d1041fa5953b9480cdc564e06bcf46f0e4bdbdcc" name="docker" arch="x86_64">
  <version epoch="0" ver="20.10.23_ce" rel="150000.175.1"/>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
</package>
<package pkgid="a872e38b57c6ed58a12dd80b11c5eb18331ad0232b26dd2329eb19fb04203b4c" name="docker" arch="aarch64">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="0e3dc4c7c1786340c7f74a4e4edd41a2623d99625149491e798f4deb0c2fa97f" name="docker" arch="s390x">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="6b700c31aab8b33034f40a6488cb25cd0bd62fd6de5f7b146d80989904ec48db" name="docker" arch="src">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="bfb6e269ee91a7de2a1605afed45c73162b80e67a7a3e5f18640bf6581e0d53d" name="docker" arch="x86_64">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="e7c0a54912cc642903ee0254c4e6c733cb73009d0925acd1d6cee74d94171b6b" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="213adf10f7523687f3bb7539c7f402879a0a5b03325c190ce83e57bfd403c849" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="550756851767637f1b47e03dbf4b14ed29d4745f4d373501e7c033f841e7011c" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="c06dbfa8111ad2cf60417f1869d9f96b447860787f19e9b804bd7adf97fa7571" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="c67f73716d127e14d66892164278f5f407fc474abdb496371af6aa4ca8542ed4" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="d1d1f3e84b39ae66ab491db19be9b6c6de6b643fee935d36d4c6f0786eadfd3d" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="ee3172e671bb2af923790c63667a47953c2db7e1ea46b39067561987122979f0" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="25635beaae74f7ee41664c64b945c60a927eebcd0f369c763b3429c238c9e1bb" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="c32721b6c663ac841115606bc069c5fb9d24c5a726439700cd2747fb4e2ff444" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="2136761437ae039b4a6c019ee21ce158ff7cd2009490d0fbc5200a39fd9c048a" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="4c6828b9cc2adcda6b056bb70c5263e5b03e019c39dae7d3ceba6ede905710a4" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="932994fb78203a5675a527c1b17b2c5f332289e8eb560a40e9a20292fe7345cc" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="43a817329b4e991ae329abdf7bacde54bbdd12a283f06d9aebcb579ad26e2a73" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="1493cb832d97c362c323ea4685c7ed811727793b5e06675c4206a1245c51aea4" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="fa6df62132477a969772c4f0a129d8d220ea096a5df12b25f47d0c5b9ddd5326" name="dracut-mkinitrd-deprecated" arch="aarch64">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="74390813347753a6edbc7b433a293b0af2a2451cc5e1bdc8f282ee8e8a382e46" name="dracut-mkinitrd-deprecated" arch="s390x">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="457ead0efe0aef2471352b2f46e22365db11ffc3ac836ef1ee5ff537f0d83107" name="dracut-mkinitrd-deprecated" arch="x86_64">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="d2ae948e9f060f3c1c7e462f5621dee516d08fb836ca2ca7ee8f5dda616dda79" name="dracut-mkinitrd-deprecated" arch="aarch64">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="d69370c2b35dc42681c7d0e4d51a03f76915783443bdcb761cad0bd3c6f4d89d" name="dracut-mkinitrd-deprecated" arch="s390x">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="27e69b032a09001e27d57d1cd85687b1f9706ae503bbafcbdaecd42c2be3b687" name="dracut-mkinitrd-deprecated" arch="x86_64">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="5d48e1e39000df0798406cdda03b93ef761c1401f500bda066d15dab99f127d5" name="drbd-utils" arch="aarch64">
  <version epoch="0" ver="9.19.0" rel="150400.3.17.1"/>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nwang@suse.com" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nwang@suse.com" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1591617600">- bsc#1172641, fix the link error of setup_option.
  Add patch link-error-setup_option.patch</changelog>
  <changelog author="nwang@suse.com" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nwang@suse.com" date="1599825600">- bsc#1176436, update to 9.14.0
  * pacemaker: various fixes/improvements for PM &gt;=1.1.15
  including the 2 series; crm-fence-peer.9.sh
  * systemd dependency for drbd-proxy
  * containers: multi-arch support, especially for s390x
  * multipathd: blacklist drbd
  * drbdsetup: code refactoring and improvements,
  as well as tests for events2!
  add "may_promote", "promotion_score". See man page.
  * build: compile fixes for gcc-10; CI pipeline
  * handlers: add "disconnected"
- Remove patch crm-fence-peer-pacemaker2-issue2.patch (included)
  Remove patch link-error-setup_option.patch (included)</changelog>
  <changelog author="ohering@suse.de" date="1602504000">- Move block-drbd back to /etc/xen/scripts (bsc#1177531)
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add pie-fix.patch: explicitly pass -pie linker flag when building drbdmon.
  The Makefile explicitly passes -fPIC, thereby breaking our gcc-PIE profile.
  In addition the Makefile also ignores CXXFLAGS and LDFLAGS passed via the
  environment. Therefore fix it with this patch. This makes drbdmon a PIE
  binary (bsc#1184122, bsc#1185132).</changelog>
  <changelog author="nwang@suse.com" date="1626868800">- Update to 9.18.0 (bsc#1189363)
  * build: remove rpm related targets
  * drbdsetup,v84: fix minor compile warnings
  * systemd: resource specific activation
  * systemd: drbd-reactor promoter templates
  * doc: fix maximum ping timeout
  * doc: add man pages for the systemd templates
  * drbdadm,v9: fix dstate for diskless volumes
  * build/release: use lbvers.py
  * drbd-attr: don't leak fd to drbdsetup
  * doc: various fixes and additions
  * drbdsetup,events2,v9: add backing_device
  * build,Debian: rm dh-systemd dependency
  * drbdsetup,events2,v9: fix --poll regression
  * drbdmeta: fix bug with ALs with small final extents
  * build,Debian: rm mail recommends
  * drbdsetup,events2,v9: allow --poll without --now
  * drbdsetup,invalidate: allow bitmap based resync after verify
  * drbdadm,sh-ll-dev: change output to "none" if diskless
  * drbd-attr/may_promote: fixes from 9.15.1
  * drbdadm,v9: allow set-gi in single node clusters
  * drbsetup,events2,v9: diff(erential) output
  * drbsetup,events2,v9: add --full output
  * v9: allow resource rename, also in drbdmon
  * drbdadm,v9: allow c-max-rate to be disabled
  * New drbd-attr Pacemaker RA
  * events2: handle mixed initial state and multicast events
  * events2: fix regression to always print resync done
- Add patch systemd-drbd-service-needs-network-online.patch</changelog>
  <changelog author="nwang@suse.com" date="1631880000">- bsc#1190591, fail to start due to lack of /usr/var/run/drbd</changelog>
  <changelog author="nwang@suse.com" date="1633953600">- Update to 9.19.0
  * v9,events2: show changes of peer-client
  * v9: rr-conflict strategy auto-discard for protocol A
  * windrbd: various fixes including setting the systemd root
  * containers: switch to UBI8
  * v9,wait-*: fix segfault
- bsc#1191058, active UsrMerge to install in /usr
  Add patch usrmerge_move_lib_to_prefix_lib.patch
- Remove patch fix-libdir-in-Makefile.patch
  Remove patch systemd-drbd-service-needs-network-online.patch (included)
- Add drbd-utils.rpmlintrc for Error missing-call-to-setgroups-before-setuid
- Add rpmlint-build-error.patch to fix rpmbuild build errors</changelog>
  <changelog author="zzhou@suse.com" date="1663329600">- restore drbd scripts back to /usr/lib/drbd from /lib/drbd (bsc#1203220)
  Update drbd-utils.spec
- fix drbd-bash-completion
  Update rpmlint-build-error.patch</changelog>
  <changelog author="zzhou@suse.com" date="1663761600">- drbd-utils.spec force _localstatedir to use /var/lib in runtime (bsc#1203220)</changelog>
  <changelog author="zzhou@suse.com" date="1665748800">- bsc#1204276 remove crm-fence-peer.sh for drbd8 to avoid confusion with v9</changelog>
  <changelog author="heming.zhao@suse.com" date="1672747200">- drbd.service fails to load - incorrect path to executable (bsc#1206754)
  * use %suse_version to replace %UsrMerge
  * modify drbd-utils.spec for create symbolic folder "/lib/drbd"</changelog>
  <changelog author="nicholas.yang@suse.com" date="1678449600">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to rename it in pretrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679572800">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to manipulate the symlink in %postun and %posttrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679918400">- crm-fence-peer incompatible with Pacemaker 2.1 and needs backports (bsc#1209783)
  * 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  * 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch</changelog>
</package>
<package pkgid="f2a6b195da04a93d7f8414c4c266154d6c5efb9eb3e0ea5c8b9aa18692ec9e79" name="drbd-utils" arch="s390x">
  <version epoch="0" ver="9.19.0" rel="150400.3.17.1"/>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nwang@suse.com" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nwang@suse.com" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1591617600">- bsc#1172641, fix the link error of setup_option.
  Add patch link-error-setup_option.patch</changelog>
  <changelog author="nwang@suse.com" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nwang@suse.com" date="1599825600">- bsc#1176436, update to 9.14.0
  * pacemaker: various fixes/improvements for PM &gt;=1.1.15
  including the 2 series; crm-fence-peer.9.sh
  * systemd dependency for drbd-proxy
  * containers: multi-arch support, especially for s390x
  * multipathd: blacklist drbd
  * drbdsetup: code refactoring and improvements,
  as well as tests for events2!
  add "may_promote", "promotion_score". See man page.
  * build: compile fixes for gcc-10; CI pipeline
  * handlers: add "disconnected"
- Remove patch crm-fence-peer-pacemaker2-issue2.patch (included)
  Remove patch link-error-setup_option.patch (included)</changelog>
  <changelog author="ohering@suse.de" date="1602504000">- Move block-drbd back to /etc/xen/scripts (bsc#1177531)
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add pie-fix.patch: explicitly pass -pie linker flag when building drbdmon.
  The Makefile explicitly passes -fPIC, thereby breaking our gcc-PIE profile.
  In addition the Makefile also ignores CXXFLAGS and LDFLAGS passed via the
  environment. Therefore fix it with this patch. This makes drbdmon a PIE
  binary (bsc#1184122, bsc#1185132).</changelog>
  <changelog author="nwang@suse.com" date="1626868800">- Update to 9.18.0 (bsc#1189363)
  * build: remove rpm related targets
  * drbdsetup,v84: fix minor compile warnings
  * systemd: resource specific activation
  * systemd: drbd-reactor promoter templates
  * doc: fix maximum ping timeout
  * doc: add man pages for the systemd templates
  * drbdadm,v9: fix dstate for diskless volumes
  * build/release: use lbvers.py
  * drbd-attr: don't leak fd to drbdsetup
  * doc: various fixes and additions
  * drbdsetup,events2,v9: add backing_device
  * build,Debian: rm dh-systemd dependency
  * drbdsetup,events2,v9: fix --poll regression
  * drbdmeta: fix bug with ALs with small final extents
  * build,Debian: rm mail recommends
  * drbdsetup,events2,v9: allow --poll without --now
  * drbdsetup,invalidate: allow bitmap based resync after verify
  * drbdadm,sh-ll-dev: change output to "none" if diskless
  * drbd-attr/may_promote: fixes from 9.15.1
  * drbdadm,v9: allow set-gi in single node clusters
  * drbsetup,events2,v9: diff(erential) output
  * drbsetup,events2,v9: add --full output
  * v9: allow resource rename, also in drbdmon
  * drbdadm,v9: allow c-max-rate to be disabled
  * New drbd-attr Pacemaker RA
  * events2: handle mixed initial state and multicast events
  * events2: fix regression to always print resync done
- Add patch systemd-drbd-service-needs-network-online.patch</changelog>
  <changelog author="nwang@suse.com" date="1631880000">- bsc#1190591, fail to start due to lack of /usr/var/run/drbd</changelog>
  <changelog author="nwang@suse.com" date="1633953600">- Update to 9.19.0
  * v9,events2: show changes of peer-client
  * v9: rr-conflict strategy auto-discard for protocol A
  * windrbd: various fixes including setting the systemd root
  * containers: switch to UBI8
  * v9,wait-*: fix segfault
- bsc#1191058, active UsrMerge to install in /usr
  Add patch usrmerge_move_lib_to_prefix_lib.patch
- Remove patch fix-libdir-in-Makefile.patch
  Remove patch systemd-drbd-service-needs-network-online.patch (included)
- Add drbd-utils.rpmlintrc for Error missing-call-to-setgroups-before-setuid
- Add rpmlint-build-error.patch to fix rpmbuild build errors</changelog>
  <changelog author="zzhou@suse.com" date="1663329600">- restore drbd scripts back to /usr/lib/drbd from /lib/drbd (bsc#1203220)
  Update drbd-utils.spec
- fix drbd-bash-completion
  Update rpmlint-build-error.patch</changelog>
  <changelog author="zzhou@suse.com" date="1663761600">- drbd-utils.spec force _localstatedir to use /var/lib in runtime (bsc#1203220)</changelog>
  <changelog author="zzhou@suse.com" date="1665748800">- bsc#1204276 remove crm-fence-peer.sh for drbd8 to avoid confusion with v9</changelog>
  <changelog author="heming.zhao@suse.com" date="1672747200">- drbd.service fails to load - incorrect path to executable (bsc#1206754)
  * use %suse_version to replace %UsrMerge
  * modify drbd-utils.spec for create symbolic folder "/lib/drbd"</changelog>
  <changelog author="nicholas.yang@suse.com" date="1678449600">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to rename it in pretrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679572800">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to manipulate the symlink in %postun and %posttrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679918400">- crm-fence-peer incompatible with Pacemaker 2.1 and needs backports (bsc#1209783)
  * 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  * 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch</changelog>
</package>
<package pkgid="7457e40c79741cd3b44ab0012f32a980067dd08c1866e0281a0a6c967a702e1e" name="drbd-utils" arch="src">
  <version epoch="0" ver="9.19.0" rel="150400.3.17.1"/>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nwang@suse.com" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nwang@suse.com" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1591617600">- bsc#1172641, fix the link error of setup_option.
  Add patch link-error-setup_option.patch</changelog>
  <changelog author="nwang@suse.com" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nwang@suse.com" date="1599825600">- bsc#1176436, update to 9.14.0
  * pacemaker: various fixes/improvements for PM &gt;=1.1.15
  including the 2 series; crm-fence-peer.9.sh
  * systemd dependency for drbd-proxy
  * containers: multi-arch support, especially for s390x
  * multipathd: blacklist drbd
  * drbdsetup: code refactoring and improvements,
  as well as tests for events2!
  add "may_promote", "promotion_score". See man page.
  * build: compile fixes for gcc-10; CI pipeline
  * handlers: add "disconnected"
- Remove patch crm-fence-peer-pacemaker2-issue2.patch (included)
  Remove patch link-error-setup_option.patch (included)</changelog>
  <changelog author="ohering@suse.de" date="1602504000">- Move block-drbd back to /etc/xen/scripts (bsc#1177531)
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add pie-fix.patch: explicitly pass -pie linker flag when building drbdmon.
  The Makefile explicitly passes -fPIC, thereby breaking our gcc-PIE profile.
  In addition the Makefile also ignores CXXFLAGS and LDFLAGS passed via the
  environment. Therefore fix it with this patch. This makes drbdmon a PIE
  binary (bsc#1184122, bsc#1185132).</changelog>
  <changelog author="nwang@suse.com" date="1626868800">- Update to 9.18.0 (bsc#1189363)
  * build: remove rpm related targets
  * drbdsetup,v84: fix minor compile warnings
  * systemd: resource specific activation
  * systemd: drbd-reactor promoter templates
  * doc: fix maximum ping timeout
  * doc: add man pages for the systemd templates
  * drbdadm,v9: fix dstate for diskless volumes
  * build/release: use lbvers.py
  * drbd-attr: don't leak fd to drbdsetup
  * doc: various fixes and additions
  * drbdsetup,events2,v9: add backing_device
  * build,Debian: rm dh-systemd dependency
  * drbdsetup,events2,v9: fix --poll regression
  * drbdmeta: fix bug with ALs with small final extents
  * build,Debian: rm mail recommends
  * drbdsetup,events2,v9: allow --poll without --now
  * drbdsetup,invalidate: allow bitmap based resync after verify
  * drbdadm,sh-ll-dev: change output to "none" if diskless
  * drbd-attr/may_promote: fixes from 9.15.1
  * drbdadm,v9: allow set-gi in single node clusters
  * drbsetup,events2,v9: diff(erential) output
  * drbsetup,events2,v9: add --full output
  * v9: allow resource rename, also in drbdmon
  * drbdadm,v9: allow c-max-rate to be disabled
  * New drbd-attr Pacemaker RA
  * events2: handle mixed initial state and multicast events
  * events2: fix regression to always print resync done
- Add patch systemd-drbd-service-needs-network-online.patch</changelog>
  <changelog author="nwang@suse.com" date="1631880000">- bsc#1190591, fail to start due to lack of /usr/var/run/drbd</changelog>
  <changelog author="nwang@suse.com" date="1633953600">- Update to 9.19.0
  * v9,events2: show changes of peer-client
  * v9: rr-conflict strategy auto-discard for protocol A
  * windrbd: various fixes including setting the systemd root
  * containers: switch to UBI8
  * v9,wait-*: fix segfault
- bsc#1191058, active UsrMerge to install in /usr
  Add patch usrmerge_move_lib_to_prefix_lib.patch
- Remove patch fix-libdir-in-Makefile.patch
  Remove patch systemd-drbd-service-needs-network-online.patch (included)
- Add drbd-utils.rpmlintrc for Error missing-call-to-setgroups-before-setuid
- Add rpmlint-build-error.patch to fix rpmbuild build errors</changelog>
  <changelog author="zzhou@suse.com" date="1663329600">- restore drbd scripts back to /usr/lib/drbd from /lib/drbd (bsc#1203220)
  Update drbd-utils.spec
- fix drbd-bash-completion
  Update rpmlint-build-error.patch</changelog>
  <changelog author="zzhou@suse.com" date="1663761600">- drbd-utils.spec force _localstatedir to use /var/lib in runtime (bsc#1203220)</changelog>
  <changelog author="zzhou@suse.com" date="1665748800">- bsc#1204276 remove crm-fence-peer.sh for drbd8 to avoid confusion with v9</changelog>
  <changelog author="heming.zhao@suse.com" date="1672747200">- drbd.service fails to load - incorrect path to executable (bsc#1206754)
  * use %suse_version to replace %UsrMerge
  * modify drbd-utils.spec for create symbolic folder "/lib/drbd"</changelog>
  <changelog author="nicholas.yang@suse.com" date="1678449600">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to rename it in pretrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679572800">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to manipulate the symlink in %postun and %posttrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679918400">- crm-fence-peer incompatible with Pacemaker 2.1 and needs backports (bsc#1209783)
  * 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  * 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch</changelog>
</package>
<package pkgid="5afe4b1304685ac44186d785ba4ada09bc21b887da273f3438ee561c93e8cceb" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.19.0" rel="150400.3.17.1"/>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nwang@suse.com" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nwang@suse.com" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1591617600">- bsc#1172641, fix the link error of setup_option.
  Add patch link-error-setup_option.patch</changelog>
  <changelog author="nwang@suse.com" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nwang@suse.com" date="1599825600">- bsc#1176436, update to 9.14.0
  * pacemaker: various fixes/improvements for PM &gt;=1.1.15
  including the 2 series; crm-fence-peer.9.sh
  * systemd dependency for drbd-proxy
  * containers: multi-arch support, especially for s390x
  * multipathd: blacklist drbd
  * drbdsetup: code refactoring and improvements,
  as well as tests for events2!
  add "may_promote", "promotion_score". See man page.
  * build: compile fixes for gcc-10; CI pipeline
  * handlers: add "disconnected"
- Remove patch crm-fence-peer-pacemaker2-issue2.patch (included)
  Remove patch link-error-setup_option.patch (included)</changelog>
  <changelog author="ohering@suse.de" date="1602504000">- Move block-drbd back to /etc/xen/scripts (bsc#1177531)
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add pie-fix.patch: explicitly pass -pie linker flag when building drbdmon.
  The Makefile explicitly passes -fPIC, thereby breaking our gcc-PIE profile.
  In addition the Makefile also ignores CXXFLAGS and LDFLAGS passed via the
  environment. Therefore fix it with this patch. This makes drbdmon a PIE
  binary (bsc#1184122, bsc#1185132).</changelog>
  <changelog author="nwang@suse.com" date="1626868800">- Update to 9.18.0 (bsc#1189363)
  * build: remove rpm related targets
  * drbdsetup,v84: fix minor compile warnings
  * systemd: resource specific activation
  * systemd: drbd-reactor promoter templates
  * doc: fix maximum ping timeout
  * doc: add man pages for the systemd templates
  * drbdadm,v9: fix dstate for diskless volumes
  * build/release: use lbvers.py
  * drbd-attr: don't leak fd to drbdsetup
  * doc: various fixes and additions
  * drbdsetup,events2,v9: add backing_device
  * build,Debian: rm dh-systemd dependency
  * drbdsetup,events2,v9: fix --poll regression
  * drbdmeta: fix bug with ALs with small final extents
  * build,Debian: rm mail recommends
  * drbdsetup,events2,v9: allow --poll without --now
  * drbdsetup,invalidate: allow bitmap based resync after verify
  * drbdadm,sh-ll-dev: change output to "none" if diskless
  * drbd-attr/may_promote: fixes from 9.15.1
  * drbdadm,v9: allow set-gi in single node clusters
  * drbsetup,events2,v9: diff(erential) output
  * drbsetup,events2,v9: add --full output
  * v9: allow resource rename, also in drbdmon
  * drbdadm,v9: allow c-max-rate to be disabled
  * New drbd-attr Pacemaker RA
  * events2: handle mixed initial state and multicast events
  * events2: fix regression to always print resync done
- Add patch systemd-drbd-service-needs-network-online.patch</changelog>
  <changelog author="nwang@suse.com" date="1631880000">- bsc#1190591, fail to start due to lack of /usr/var/run/drbd</changelog>
  <changelog author="nwang@suse.com" date="1633953600">- Update to 9.19.0
  * v9,events2: show changes of peer-client
  * v9: rr-conflict strategy auto-discard for protocol A
  * windrbd: various fixes including setting the systemd root
  * containers: switch to UBI8
  * v9,wait-*: fix segfault
- bsc#1191058, active UsrMerge to install in /usr
  Add patch usrmerge_move_lib_to_prefix_lib.patch
- Remove patch fix-libdir-in-Makefile.patch
  Remove patch systemd-drbd-service-needs-network-online.patch (included)
- Add drbd-utils.rpmlintrc for Error missing-call-to-setgroups-before-setuid
- Add rpmlint-build-error.patch to fix rpmbuild build errors</changelog>
  <changelog author="zzhou@suse.com" date="1663329600">- restore drbd scripts back to /usr/lib/drbd from /lib/drbd (bsc#1203220)
  Update drbd-utils.spec
- fix drbd-bash-completion
  Update rpmlint-build-error.patch</changelog>
  <changelog author="zzhou@suse.com" date="1663761600">- drbd-utils.spec force _localstatedir to use /var/lib in runtime (bsc#1203220)</changelog>
  <changelog author="zzhou@suse.com" date="1665748800">- bsc#1204276 remove crm-fence-peer.sh for drbd8 to avoid confusion with v9</changelog>
  <changelog author="heming.zhao@suse.com" date="1672747200">- drbd.service fails to load - incorrect path to executable (bsc#1206754)
  * use %suse_version to replace %UsrMerge
  * modify drbd-utils.spec for create symbolic folder "/lib/drbd"</changelog>
  <changelog author="nicholas.yang@suse.com" date="1678449600">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to rename it in pretrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679572800">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to manipulate the symlink in %postun and %posttrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679918400">- crm-fence-peer incompatible with Pacemaker 2.1 and needs backports (bsc#1209783)
  * 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  * 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch</changelog>
</package>
<package pkgid="a56405f4e1af8de07e8e106547a84f251523fbef7462bea47e52ada977396564" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150400.8.9.1"/>
  <changelog author="Mathias.Homann@opensuse.org" date="1570708800">- rebased the original patch from revision 19</changelog>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir with %_prefix/lib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="hpj@urpla.net" date="1583668800">- Update to version 0.7.3:
  * release: v0.7.3
  * chore: update translations
  * doc: README: add note about integration tests
  * test: check-container: also run check-integration
  * test: integration: NM zone overrides interface on reload
  * test: build: support integration tests
  * test: functions: add macro NMCLI_CHECK
  * test: functions: new macros for starting/stopping NetworkManager
  * fix: test: leave "cleanup" for tests cases
  * test: check-container: add support for fedora rawhide
  * test: check-container: add support for debian sid
  * test: build: add support for running in containers
  * fix: test/functions: FWD_END_TEST: improve grep for errors/warnings
  * fix: test: direct passthrough: no need to check for dummy module
  * fix: test: CHECK_NAT_COEXISTENCE: only check for kernel version
  * fix: reload: let NM interface assignments override permanent config
  * chore: tests: rename IF_IPV6_SUPPORTED to IF_HOST_SUPPORTS_IPV6_RULES
  * fix: tests: convert host ipv6 checks to runtime
  * fix: tests: convert ip6tables checks to runtime
  * fix: tests: convert probe of nft numeric args to runtime
  * fix: tests: convert nftables fib checks to runtime
  * fix: build: distribute testsuite
  * fix: don't probe for available kernel modules
  * fix: failure to load modules no longer fatal
  * fix: tests/functions: canonicalize XML output
  * chore: doc: update authors
  * fix: test: use debug output based on autotest variable
  * fix: src/tests/Makefile: distclean should clean atconfig</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
</package>
<package pkgid="7999a38da2aae53f730059d9f77eda3dbc86ae87ee3ca928c494965e01882c85" name="firewalld" arch="src">
  <version epoch="0" ver="0.9.3" rel="150400.8.9.1"/>
  <changelog author="Mathias.Homann@opensuse.org" date="1570708800">- rebased the original patch from revision 19</changelog>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir with %_prefix/lib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="hpj@urpla.net" date="1583668800">- Update to version 0.7.3:
  * release: v0.7.3
  * chore: update translations
  * doc: README: add note about integration tests
  * test: check-container: also run check-integration
  * test: integration: NM zone overrides interface on reload
  * test: build: support integration tests
  * test: functions: add macro NMCLI_CHECK
  * test: functions: new macros for starting/stopping NetworkManager
  * fix: test: leave "cleanup" for tests cases
  * test: check-container: add support for fedora rawhide
  * test: check-container: add support for debian sid
  * test: build: add support for running in containers
  * fix: test/functions: FWD_END_TEST: improve grep for errors/warnings
  * fix: test: direct passthrough: no need to check for dummy module
  * fix: test: CHECK_NAT_COEXISTENCE: only check for kernel version
  * fix: reload: let NM interface assignments override permanent config
  * chore: tests: rename IF_IPV6_SUPPORTED to IF_HOST_SUPPORTS_IPV6_RULES
  * fix: tests: convert host ipv6 checks to runtime
  * fix: tests: convert ip6tables checks to runtime
  * fix: tests: convert probe of nft numeric args to runtime
  * fix: tests: convert nftables fib checks to runtime
  * fix: build: distribute testsuite
  * fix: don't probe for available kernel modules
  * fix: failure to load modules no longer fatal
  * fix: tests/functions: canonicalize XML output
  * chore: doc: update authors
  * fix: test: use debug output based on autotest variable
  * fix: src/tests/Makefile: distclean should clean atconfig</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
</package>
<package pkgid="b23714ec1b45c056eaf48c43bb2e29a10f1bdfc95ffa301bbf635e3ca061a232" name="gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="0601fe75f4686f638245dd853b8d18a4f427b61b5c340024b17be880106a49a6" name="glib2" arch="src">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="ce41fa747dffc2cc373157e71d0d2b95fe683b69e1539793e0f48fbd7f9eb13c" name="glib2-tools" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="01d484599bf0d583d66c62444d2646cdf314523872a4b6d6dc6e11effa570f5d" name="glib2-tools" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="8515cf588716028b5561f1393eeaee886ad81a54a1e8cc05633d0f5ec8a1d4ac" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="8577cf3fa54174e4f3ba2f4f94da700e5b866064cd04d9c61859e9ef47c48350" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="cfab62a8f57c09412b041d52aa52e9cec11083726b07f12143dcfe9bc7b9380d" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="67b798e152348dad385363a770629cc5df42ee59228e27a4afbd9a3d9c4ae005" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="0e29544946060c95fbce1245183f8a07c5101fb3f958d31c6286f505ba747920" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="c7aa4fec8239a5d2f004fd1ef93407d7a2c955422b576cf93d3f06da37e4aaf7" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="8ca4bb44c65b8a9dbf5388a29bd6664a4799512489c2370fb6dab7b969160237" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="3167c004b8de80a8521f748ebf7284b402fa3fe41c9187f6ac3f9812549f8fee" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="5e3f0e6f15c7abfcbfed7042576671106885a7058c48a430ec50f5a2e581311d" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="a84f2663c479538c5b887fdd65b2fedba7d78a0759690c36be88d0c4ea728fa9" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="3156f42a1a59ca7461e4e8fa22d0ab7754e60ef7ba69d6516fbca322acb501be" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="cc29c3ad73c784470e61900be04074a7f024ea5e54faf8bb02dda0f5bb8802a6" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="d3cd15c37dbddfc747c0f2a4f7b53103b12d46755e58b80437870b9219c0dedc" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="d888ca2508bd29c516842042d85d303bedab75bb36e6af364df88df4324dc8d5" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="97338ebff0514ca4c02f8b464f056735434288f659154d890920f662339cf890" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="87fb815b60fa266a1ad0cad64d75e0c17ca75fd80e491ac6adbfe0cf8196347f" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="a04b03e748a52f014a4e81d0eeac5bc3b9aae985f1de92ea012c32c5ab0f1a01" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="33c6116c151d051bb6628b33a75aec760e9bd2dcf91ad0f20518694c6e1fd3ff" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="1e2b507131b13caee785ee38edfd5c412c597ce247348d8acd88d941782296d3" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="7f49648599b77be9b65a153fa3314b92c8f2c6c8aefa3b6c2b678a287d9c6c76" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="bfb9d4b8f540f337eb25334fe7135c5e7833ecc41f6df3f51bebbc505baeaf34" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="d3865c7fcd2631ee281a381adab131b66999ba48f182f7c648ad90287809d891" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="6977182227f38d64d9e5998a90d5bac038b9d4236b4c040060ec4805757c6ab2" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="75d867507aef5f1d83106cd8df639737c136a46b185d176f18019fc29891d6cf" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="fefa3a7eea55faace328e9de1c38d3e5c49fe1dab422056cf34dea50d352741c" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="923db9afc53eaefccd0da4fcde73eb64bcc01a7809c2f01e39c76c33cf0e41ed" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="4c9ace30652c2dba6d8fd3a183a77a399e49310ced14f3cce5038495e0a019c5" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="119e97e62f438180355036f9a3c353a48a74f2d3b43c1f43f0adb2bc6ff103ac" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="39a6b32dd1367b72000f96cb523a88007e14a854ff5bbf301a9629e6bd6222b7" name="gnutls" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="59b28ee6089476cfb83a5bc9599e5f2fd268ce30491582a9210368b7e9c76fbd" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="098944d8e3abbf6b42cd57b6fd75542f8b11bdcf9186bad4864a77a9b68b4a57" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="e2050940c3949cef68922c064444a31b7760b63480ab6a44a5ba7361c9cfe76a" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="faee0c717b051ae09188ee7de357588d0e283619b185114b6f1e8f610680f802" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="2f6b684a49de17ee397539b4d369fbaae96a4405fecd7768936c6b5f47ac3c4b" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="2229d0a41b2c34bf4ceb910c96b6ecd22e68209c5d747399739a754e72a1de02" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="917af0fc80c6281faba270b390d6a4a2e1af73ac8ee8d065de93d55c929c638e" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="ffe0be0affa87e019a2bdf96aa5d1673735757d7f0fbd41f2ce8ecfed84a8ae0" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="405548aab9b80163c80c9ccf8ef76475f6840182d87929fc17f878543126599b" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="a29dfc0bbee1a4e81f9b993d143a1f8c957ee71a9c794c7aff0607d6dfddff7c" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="61b51147a79e0c90b843fef3c629716a15ccb234cb87bbca7bf88026d16092a1" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="57e9b0f3578fa6d1edf41f8014d15f7b80109817093c0ee00e09447c4d021ad2" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="fc2c01792e7cbf21582b09bca382677f63be99dc637183afddaccd0e4cf0cacf" name="haproxy" arch="aarch64">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.13.1"/>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Add lua54.patch to fix building with lua 5.4</changelog>
  <changelog author="mrueckert@suse.de" date="1612612800">- Update to version 2.3.5+git0.5902ad99b:
  * [RELEASE] Released version 2.3.5
  * MINOR: config: Deprecate and ignore tune.chksize global option
  * BUG/MINOR: sock: Unclosed fd in case of connection allocation failure
  * BUG/MEDIUM: mux-h2: do not quit the demux loop before setting END_REACHED
  * BUG/MEDIUM: mux-h2: handle remaining read0 cases
  * BUILD: Makefile: move REGTESTST_TYPE default setting
  * MINOR: cli/show_fd: report local and report ports when known
  * BUILD: ssl: fix build breakage with last commit
  * BUG/MINOR: ssl: do not try to use early data if not configured
  * BUG/MINOR: xxhash: make sure armv6 uses memcpy()
  * BUG/MINOR: mux_h2: fix incorrect stat titles
  * BUG/MEDIUM: ssl: check a connection's status before computing a handshake
  * BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store
  * BUG/MINOR: stick-table: Always call smp_fetch_src() with a valid arg list
  * DOC: management: fix "show resolvers" alphabetical ordering
  * MINOR: h1: Raise the chunk size limit up to (2^52 - 1)
  * MINOR: mux-h1/show_fd: report as suspicious an entry with too many calls
  * MINOR: mux-h2/show_fd: report as suspicious an entry with too many calls
  * MINOR: ssl/show_fd: report some FDs as suspicious when possible
  * MINOR: cli/show_fd: report some easily detectable suspicious states
  * MINOR: cli: give the show_fd helpers the ability to report a suspicious entry
  * MINOR: mux-fcgi: make the "show fd" helper also decode the fstrm subscriber when known
  * MINOR: mux-h1: make the "show fd" helper also decode the h1s subscriber when known
  * MINOR: mux-h2: make the "show fd" helper also decode the h2s subscriber when known
  * MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them
  * MINOR: ssl: provide a "show fd" helper to report important SSL information
  * MINOR: xprt: add a new show_fd() helper to complete some "show fd" dumps.
  * MINOR: cli: make "show fd" also report the xprt and xprt_ctx
  * CLEANUP: cli: make "show fd" use a const connection to access other fields
  * CLEANUP: tools: make resolve_sym_name() take a const pointer
  * MINOR: contrib: Make the wireshark peers dissector compile for more distribs.
  * BUG/MINOR: backend: check available list allocation for reuse
  * BUG/MEDIUM: backend: never reuse a connection for tcp mode
  * REORG: backend: simplify conn_backend_get
  * BUG/MEDIUM: session: only retrieve ready idle conn from session
  * BUG/MINOR: ssl: init tmp chunk correctly in ssl_sock_load_sctl_from_file()
  * BUG/MINOR: config: fix leak on proxy.conn_src.bind_hdr_name
  * BUG/MEDIUM: filters/htx: Fix data forwarding when payload length is unknown
  * DOC: Improve documentation of the various hdr() fetches
  * BUILD/MINOR: lua: define _GNU_SOURCE for LLONG_MAX
  * BUG/MEDIUM: mux-h2: fix read0 handling on partial frames
  * BUG/MEDIUM: tcpcheck: Don't destroy connection in the wake callback context
  * BUG/MINOR: mworker: define _GNU_SOURCE for strsignal()
  * BUG/MINOR: mux_h2: missing space between "st" and ".flg" in the "show fd" helper
  * BUG/MINOR: peers: Wrong "new_conn" value for "show peers" CLI command.
  * MINOR: build: discard echoing in help target
  * BUG/MINOR: peers: Possible appctx pointer dereference.
  * BUG/MEDIUM: stats: add missing INF_BUILD_INFO definition
  * BUILD: peers: fix build warning about unused variable
  * BUG/MINOR: dns: SRV records ignores duplicated AR records (v2)
  * MINOR: peers: Add traces for peer control messages.
  * BUG/MINOR: threads: Fixes the number of possible cpus report for Mac.
  * MINOR: server: Forbid server definitions in frontend sections
  * MINOR: config: Add failifnotcap() to emit an alert on proxy capabilities
  * BUG/MINOR: init: Use a dynamic buffer to set HAPROXY_CFGFILES env variable</changelog>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
</package>
<package pkgid="1ef4a4d291fc1f5c90df3dd4d09a93ddf6ce0805b8b23f7ccc8f438a1ceee220" name="haproxy" arch="s390x">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.13.1"/>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Add lua54.patch to fix building with lua 5.4</changelog>
  <changelog author="mrueckert@suse.de" date="1612612800">- Update to version 2.3.5+git0.5902ad99b:
  * [RELEASE] Released version 2.3.5
  * MINOR: config: Deprecate and ignore tune.chksize global option
  * BUG/MINOR: sock: Unclosed fd in case of connection allocation failure
  * BUG/MEDIUM: mux-h2: do not quit the demux loop before setting END_REACHED
  * BUG/MEDIUM: mux-h2: handle remaining read0 cases
  * BUILD: Makefile: move REGTESTST_TYPE default setting
  * MINOR: cli/show_fd: report local and report ports when known
  * BUILD: ssl: fix build breakage with last commit
  * BUG/MINOR: ssl: do not try to use early data if not configured
  * BUG/MINOR: xxhash: make sure armv6 uses memcpy()
  * BUG/MINOR: mux_h2: fix incorrect stat titles
  * BUG/MEDIUM: ssl: check a connection's status before computing a handshake
  * BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store
  * BUG/MINOR: stick-table: Always call smp_fetch_src() with a valid arg list
  * DOC: management: fix "show resolvers" alphabetical ordering
  * MINOR: h1: Raise the chunk size limit up to (2^52 - 1)
  * MINOR: mux-h1/show_fd: report as suspicious an entry with too many calls
  * MINOR: mux-h2/show_fd: report as suspicious an entry with too many calls
  * MINOR: ssl/show_fd: report some FDs as suspicious when possible
  * MINOR: cli/show_fd: report some easily detectable suspicious states
  * MINOR: cli: give the show_fd helpers the ability to report a suspicious entry
  * MINOR: mux-fcgi: make the "show fd" helper also decode the fstrm subscriber when known
  * MINOR: mux-h1: make the "show fd" helper also decode the h1s subscriber when known
  * MINOR: mux-h2: make the "show fd" helper also decode the h2s subscriber when known
  * MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them
  * MINOR: ssl: provide a "show fd" helper to report important SSL information
  * MINOR: xprt: add a new show_fd() helper to complete some "show fd" dumps.
  * MINOR: cli: make "show fd" also report the xprt and xprt_ctx
  * CLEANUP: cli: make "show fd" use a const connection to access other fields
  * CLEANUP: tools: make resolve_sym_name() take a const pointer
  * MINOR: contrib: Make the wireshark peers dissector compile for more distribs.
  * BUG/MINOR: backend: check available list allocation for reuse
  * BUG/MEDIUM: backend: never reuse a connection for tcp mode
  * REORG: backend: simplify conn_backend_get
  * BUG/MEDIUM: session: only retrieve ready idle conn from session
  * BUG/MINOR: ssl: init tmp chunk correctly in ssl_sock_load_sctl_from_file()
  * BUG/MINOR: config: fix leak on proxy.conn_src.bind_hdr_name
  * BUG/MEDIUM: filters/htx: Fix data forwarding when payload length is unknown
  * DOC: Improve documentation of the various hdr() fetches
  * BUILD/MINOR: lua: define _GNU_SOURCE for LLONG_MAX
  * BUG/MEDIUM: mux-h2: fix read0 handling on partial frames
  * BUG/MEDIUM: tcpcheck: Don't destroy connection in the wake callback context
  * BUG/MINOR: mworker: define _GNU_SOURCE for strsignal()
  * BUG/MINOR: mux_h2: missing space between "st" and ".flg" in the "show fd" helper
  * BUG/MINOR: peers: Wrong "new_conn" value for "show peers" CLI command.
  * MINOR: build: discard echoing in help target
  * BUG/MINOR: peers: Possible appctx pointer dereference.
  * BUG/MEDIUM: stats: add missing INF_BUILD_INFO definition
  * BUILD: peers: fix build warning about unused variable
  * BUG/MINOR: dns: SRV records ignores duplicated AR records (v2)
  * MINOR: peers: Add traces for peer control messages.
  * BUG/MINOR: threads: Fixes the number of possible cpus report for Mac.
  * MINOR: server: Forbid server definitions in frontend sections
  * MINOR: config: Add failifnotcap() to emit an alert on proxy capabilities
  * BUG/MINOR: init: Use a dynamic buffer to set HAPROXY_CFGFILES env variable</changelog>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
</package>
<package pkgid="aec65c76e1024ca703d4ca24756ea12ea197663dbd9decfd4987f04d370ab6ab" name="haproxy" arch="src">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.13.1"/>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Add lua54.patch to fix building with lua 5.4</changelog>
  <changelog author="mrueckert@suse.de" date="1612612800">- Update to version 2.3.5+git0.5902ad99b:
  * [RELEASE] Released version 2.3.5
  * MINOR: config: Deprecate and ignore tune.chksize global option
  * BUG/MINOR: sock: Unclosed fd in case of connection allocation failure
  * BUG/MEDIUM: mux-h2: do not quit the demux loop before setting END_REACHED
  * BUG/MEDIUM: mux-h2: handle remaining read0 cases
  * BUILD: Makefile: move REGTESTST_TYPE default setting
  * MINOR: cli/show_fd: report local and report ports when known
  * BUILD: ssl: fix build breakage with last commit
  * BUG/MINOR: ssl: do not try to use early data if not configured
  * BUG/MINOR: xxhash: make sure armv6 uses memcpy()
  * BUG/MINOR: mux_h2: fix incorrect stat titles
  * BUG/MEDIUM: ssl: check a connection's status before computing a handshake
  * BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store
  * BUG/MINOR: stick-table: Always call smp_fetch_src() with a valid arg list
  * DOC: management: fix "show resolvers" alphabetical ordering
  * MINOR: h1: Raise the chunk size limit up to (2^52 - 1)
  * MINOR: mux-h1/show_fd: report as suspicious an entry with too many calls
  * MINOR: mux-h2/show_fd: report as suspicious an entry with too many calls
  * MINOR: ssl/show_fd: report some FDs as suspicious when possible
  * MINOR: cli/show_fd: report some easily detectable suspicious states
  * MINOR: cli: give the show_fd helpers the ability to report a suspicious entry
  * MINOR: mux-fcgi: make the "show fd" helper also decode the fstrm subscriber when known
  * MINOR: mux-h1: make the "show fd" helper also decode the h1s subscriber when known
  * MINOR: mux-h2: make the "show fd" helper also decode the h2s subscriber when known
  * MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them
  * MINOR: ssl: provide a "show fd" helper to report important SSL information
  * MINOR: xprt: add a new show_fd() helper to complete some "show fd" dumps.
  * MINOR: cli: make "show fd" also report the xprt and xprt_ctx
  * CLEANUP: cli: make "show fd" use a const connection to access other fields
  * CLEANUP: tools: make resolve_sym_name() take a const pointer
  * MINOR: contrib: Make the wireshark peers dissector compile for more distribs.
  * BUG/MINOR: backend: check available list allocation for reuse
  * BUG/MEDIUM: backend: never reuse a connection for tcp mode
  * REORG: backend: simplify conn_backend_get
  * BUG/MEDIUM: session: only retrieve ready idle conn from session
  * BUG/MINOR: ssl: init tmp chunk correctly in ssl_sock_load_sctl_from_file()
  * BUG/MINOR: config: fix leak on proxy.conn_src.bind_hdr_name
  * BUG/MEDIUM: filters/htx: Fix data forwarding when payload length is unknown
  * DOC: Improve documentation of the various hdr() fetches
  * BUILD/MINOR: lua: define _GNU_SOURCE for LLONG_MAX
  * BUG/MEDIUM: mux-h2: fix read0 handling on partial frames
  * BUG/MEDIUM: tcpcheck: Don't destroy connection in the wake callback context
  * BUG/MINOR: mworker: define _GNU_SOURCE for strsignal()
  * BUG/MINOR: mux_h2: missing space between "st" and ".flg" in the "show fd" helper
  * BUG/MINOR: peers: Wrong "new_conn" value for "show peers" CLI command.
  * MINOR: build: discard echoing in help target
  * BUG/MINOR: peers: Possible appctx pointer dereference.
  * BUG/MEDIUM: stats: add missing INF_BUILD_INFO definition
  * BUILD: peers: fix build warning about unused variable
  * BUG/MINOR: dns: SRV records ignores duplicated AR records (v2)
  * MINOR: peers: Add traces for peer control messages.
  * BUG/MINOR: threads: Fixes the number of possible cpus report for Mac.
  * MINOR: server: Forbid server definitions in frontend sections
  * MINOR: config: Add failifnotcap() to emit an alert on proxy capabilities
  * BUG/MINOR: init: Use a dynamic buffer to set HAPROXY_CFGFILES env variable</changelog>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
</package>
<package pkgid="5a79163d91c6c6822f3f67301a9208901151db126bbe71abfd89f20b0e870aee" name="haproxy" arch="x86_64">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.13.1"/>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Add lua54.patch to fix building with lua 5.4</changelog>
  <changelog author="mrueckert@suse.de" date="1612612800">- Update to version 2.3.5+git0.5902ad99b:
  * [RELEASE] Released version 2.3.5
  * MINOR: config: Deprecate and ignore tune.chksize global option
  * BUG/MINOR: sock: Unclosed fd in case of connection allocation failure
  * BUG/MEDIUM: mux-h2: do not quit the demux loop before setting END_REACHED
  * BUG/MEDIUM: mux-h2: handle remaining read0 cases
  * BUILD: Makefile: move REGTESTST_TYPE default setting
  * MINOR: cli/show_fd: report local and report ports when known
  * BUILD: ssl: fix build breakage with last commit
  * BUG/MINOR: ssl: do not try to use early data if not configured
  * BUG/MINOR: xxhash: make sure armv6 uses memcpy()
  * BUG/MINOR: mux_h2: fix incorrect stat titles
  * BUG/MEDIUM: ssl: check a connection's status before computing a handshake
  * BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store
  * BUG/MINOR: stick-table: Always call smp_fetch_src() with a valid arg list
  * DOC: management: fix "show resolvers" alphabetical ordering
  * MINOR: h1: Raise the chunk size limit up to (2^52 - 1)
  * MINOR: mux-h1/show_fd: report as suspicious an entry with too many calls
  * MINOR: mux-h2/show_fd: report as suspicious an entry with too many calls
  * MINOR: ssl/show_fd: report some FDs as suspicious when possible
  * MINOR: cli/show_fd: report some easily detectable suspicious states
  * MINOR: cli: give the show_fd helpers the ability to report a suspicious entry
  * MINOR: mux-fcgi: make the "show fd" helper also decode the fstrm subscriber when known
  * MINOR: mux-h1: make the "show fd" helper also decode the h1s subscriber when known
  * MINOR: mux-h2: make the "show fd" helper also decode the h2s subscriber when known
  * MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them
  * MINOR: ssl: provide a "show fd" helper to report important SSL information
  * MINOR: xprt: add a new show_fd() helper to complete some "show fd" dumps.
  * MINOR: cli: make "show fd" also report the xprt and xprt_ctx
  * CLEANUP: cli: make "show fd" use a const connection to access other fields
  * CLEANUP: tools: make resolve_sym_name() take a const pointer
  * MINOR: contrib: Make the wireshark peers dissector compile for more distribs.
  * BUG/MINOR: backend: check available list allocation for reuse
  * BUG/MEDIUM: backend: never reuse a connection for tcp mode
  * REORG: backend: simplify conn_backend_get
  * BUG/MEDIUM: session: only retrieve ready idle conn from session
  * BUG/MINOR: ssl: init tmp chunk correctly in ssl_sock_load_sctl_from_file()
  * BUG/MINOR: config: fix leak on proxy.conn_src.bind_hdr_name
  * BUG/MEDIUM: filters/htx: Fix data forwarding when payload length is unknown
  * DOC: Improve documentation of the various hdr() fetches
  * BUILD/MINOR: lua: define _GNU_SOURCE for LLONG_MAX
  * BUG/MEDIUM: mux-h2: fix read0 handling on partial frames
  * BUG/MEDIUM: tcpcheck: Don't destroy connection in the wake callback context
  * BUG/MINOR: mworker: define _GNU_SOURCE for strsignal()
  * BUG/MINOR: mux_h2: missing space between "st" and ".flg" in the "show fd" helper
  * BUG/MINOR: peers: Wrong "new_conn" value for "show peers" CLI command.
  * MINOR: build: discard echoing in help target
  * BUG/MINOR: peers: Possible appctx pointer dereference.
  * BUG/MEDIUM: stats: add missing INF_BUILD_INFO definition
  * BUILD: peers: fix build warning about unused variable
  * BUG/MINOR: dns: SRV records ignores duplicated AR records (v2)
  * MINOR: peers: Add traces for peer control messages.
  * BUG/MINOR: threads: Fixes the number of possible cpus report for Mac.
  * MINOR: server: Forbid server definitions in frontend sections
  * MINOR: config: Add failifnotcap() to emit an alert on proxy capabilities
  * BUG/MINOR: init: Use a dynamic buffer to set HAPROXY_CFGFILES env variable</changelog>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
</package>
<package pkgid="87d5a7c28ee4310e0321642249f32a16e6d446365e725523a38aa7ce59746af5" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.371" rel="150000.3.62.1"/>
  <changelog author="mpluskal@suse.com" date="1633521600">- Update to version 0.352 (bsc#1191375):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version 0.353 (bsc#1192587):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1638878400">- Update to version 0.354:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1641384000">- Update to version 0.355 (bsc#1194338):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1644321600">- Update to version 0.356:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 0.357 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 0.358 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="45880e0ea71c5082405acc666cee66f095f49538621c9b96f2158aef04205ef1" name="hwdata" arch="src">
  <version epoch="0" ver="0.371" rel="150000.3.62.1"/>
  <changelog author="mpluskal@suse.com" date="1633521600">- Update to version 0.352 (bsc#1191375):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version 0.353 (bsc#1192587):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1638878400">- Update to version 0.354:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1641384000">- Update to version 0.355 (bsc#1194338):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1644321600">- Update to version 0.356:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 0.357 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 0.358 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="45875849a1c738786439700261204b481f3494e23f24ee31eec3cbde89016ec9" name="ignition" arch="aarch64">
  <version epoch="0" ver="2.15.0" rel="150400.4.2.1"/>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 2.10.1:
  * Breaking Changes:
  * Rename Custom struct to ClevisCustom
  * Embed Clevis and ClevisCustom structs in parents
  * Always include interior nodes in merge transcript
  * Add kernel argument support
  * Fix fetching userdata on AWS when IMDSv1 is disabled
  * Fix creating Tang-based LUKS volumes before network is up
  * Document storage.filesystems.wipeFilesystem default
  * Fix file mode of ignition-kargs-helper script
- Fix Go dependency, 1.13+ is required</changelog>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
</package>
<package pkgid="a3c68355375bfb9d3c7b412f922ccc6414656bbd559e26b856e27d7da10e4993" name="ignition" arch="s390x">
  <version epoch="0" ver="2.15.0" rel="150400.4.2.1"/>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 2.10.1:
  * Breaking Changes:
  * Rename Custom struct to ClevisCustom
  * Embed Clevis and ClevisCustom structs in parents
  * Always include interior nodes in merge transcript
  * Add kernel argument support
  * Fix fetching userdata on AWS when IMDSv1 is disabled
  * Fix creating Tang-based LUKS volumes before network is up
  * Document storage.filesystems.wipeFilesystem default
  * Fix file mode of ignition-kargs-helper script
- Fix Go dependency, 1.13+ is required</changelog>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
</package>
<package pkgid="721e1caca2d311a145879589b080d3ed0aa83fbcc3adeeddd68d47997abea493" name="ignition" arch="src">
  <version epoch="0" ver="2.15.0" rel="150400.4.2.1"/>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 2.10.1:
  * Breaking Changes:
  * Rename Custom struct to ClevisCustom
  * Embed Clevis and ClevisCustom structs in parents
  * Always include interior nodes in merge transcript
  * Add kernel argument support
  * Fix fetching userdata on AWS when IMDSv1 is disabled
  * Fix creating Tang-based LUKS volumes before network is up
  * Document storage.filesystems.wipeFilesystem default
  * Fix file mode of ignition-kargs-helper script
- Fix Go dependency, 1.13+ is required</changelog>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
</package>
<package pkgid="738c461fc948863c1f688a75571fcbf74ae82a0fc2cd9333ff52da00af6d4cf5" name="ignition" arch="x86_64">
  <version epoch="0" ver="2.15.0" rel="150400.4.2.1"/>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 2.10.1:
  * Breaking Changes:
  * Rename Custom struct to ClevisCustom
  * Embed Clevis and ClevisCustom structs in parents
  * Always include interior nodes in merge transcript
  * Add kernel argument support
  * Fix fetching userdata on AWS when IMDSv1 is disabled
  * Fix creating Tang-based LUKS volumes before network is up
  * Document storage.filesystems.wipeFilesystem default
  * Fix file mode of ignition-kargs-helper script
- Fix Go dependency, 1.13+ is required</changelog>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
</package>
<package pkgid="4a59be5aebc1cc46306e3712b58f012dbcbb5ca0a10ff469d0c7daac35737460" name="ignition-dracut-grub2" arch="aarch64">
  <version epoch="0" ver="2.15.0" rel="150400.4.2.1"/>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 2.10.1:
  * Breaking Changes:
  * Rename Custom struct to ClevisCustom
  * Embed Clevis and ClevisCustom structs in parents
  * Always include interior nodes in merge transcript
  * Add kernel argument support
  * Fix fetching userdata on AWS when IMDSv1 is disabled
  * Fix creating Tang-based LUKS volumes before network is up
  * Document storage.filesystems.wipeFilesystem default
  * Fix file mode of ignition-kargs-helper script
- Fix Go dependency, 1.13+ is required</changelog>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
</package>
<package pkgid="7561c0f27a229090110ccaa87731d077ffa565980b4ed327f0062713e69017ef" name="ignition-dracut-grub2" arch="s390x">
  <version epoch="0" ver="2.15.0" rel="150400.4.2.1"/>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 2.10.1:
  * Breaking Changes:
  * Rename Custom struct to ClevisCustom
  * Embed Clevis and ClevisCustom structs in parents
  * Always include interior nodes in merge transcript
  * Add kernel argument support
  * Fix fetching userdata on AWS when IMDSv1 is disabled
  * Fix creating Tang-based LUKS volumes before network is up
  * Document storage.filesystems.wipeFilesystem default
  * Fix file mode of ignition-kargs-helper script
- Fix Go dependency, 1.13+ is required</changelog>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
</package>
<package pkgid="933543b9c8d00a4b5c0adcc2113ff4ff9570e0c0aa00f7512fb136e174103070" name="ignition-dracut-grub2" arch="x86_64">
  <version epoch="0" ver="2.15.0" rel="150400.4.2.1"/>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 2.10.1:
  * Breaking Changes:
  * Rename Custom struct to ClevisCustom
  * Embed Clevis and ClevisCustom structs in parents
  * Always include interior nodes in merge transcript
  * Add kernel argument support
  * Fix fetching userdata on AWS when IMDSv1 is disabled
  * Fix creating Tang-based LUKS volumes before network is up
  * Document storage.filesystems.wipeFilesystem default
  * Fix file mode of ignition-kargs-helper script
- Fix Go dependency, 1.13+ is required</changelog>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
</package>
<package pkgid="a7cbf2f03002b6d705c84d2aa642c2b280ee8918bc2c4d149a03f2d5d4fb0e3f" name="kbd" arch="aarch64">
  <version epoch="0" ver="2.4.0" rel="150400.5.6.1"/>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- fbtest.c: include &lt;sys/sysmacros.h&gt; for major/minor</changelog>
  <changelog author="mvidner@suse.com" date="1568894400">- Allow YaST to select Iranian (Persian, Farsi) keyboard layout
  (bsc#1092920)</changelog>
  <changelog author="kukuk@suse.de" date="1575547200">- Move pam.d/vlock to /usr/etc</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578571200">- Use a UTF-8 capable locale, otherwise ckbcomp will not not able
  to do proper uppercase/lowercase conversions.
- Rebase cz-map.patch after UTF-8 changes.
- Skip compression/decompression of maps which are about to be
  discarded later (~30%). Avoid zgrep, which is a shell script
  spawning grep and gunzip for each input file.</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 2.2.0:
  * setfont: Add option -d to double size of font.
  * kbd_mode: Add -f option and deny dangerous mode switches
    without it.
  * Data files updates.
  * Fix gcc warnings and error with gcc-10 (boo#1160273).
  * Other fixes.
  * For a full list of changes see:
    https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
- Update home page.
- Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
  kbd-1.15.2-setfont-no-cruft.patch,
  kbd-1.15.5-loadkeys-search-path.patch.</changelog>
  <changelog author="lnussel@suse.de" date="1587470400">- drop broken kbd command as well as guess_encoding (boo#1170067)
- don't use subdirectory for legacy keymaps (boo#1166423)
- use fdupes</changelog>
  <changelog author="jslaby@suse.com" date="1597924800">- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600344000">- Fix kbd-1.15.5-loadkeys-search-path.patch to prefer xkb keymaps
  (boo#1176302).</changelog>
  <changelog author="sbrabec@suse.com" date="1600344001">- Make kbdsettings working in both bash and dash (boo#1175040).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600776000">- Refresh patch to fix build on non-x86 architecture broken
  by previous commit:
  * kbdsettings-nox86.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600948800">- Update to version 2.3.0:
  * Added libkfont library (internal yet).
  * Added Canadian Multilingual Standard keyboard map.
  * Added us1 that maps Right Alt to AltGr and Shift+Tab to
    Alt+Tab.
  * The dead_macron is used instead of macron in fi.map.
  * Added retries when switching to the console (chvt, openvt).
  * Added option -d to double size of font (setfont).
  * Added long options, help messages.
  * Added solar24x32 font.
  * Updated eurlatgr font.
  * Fixed problems with formatting man pages.
  * Fixed search path error (boo#1176854).
- Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
- Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
- Refresh kbd-1.15.2-setfont-no-cruft.patch and
  kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Do not package libtswrap.so.0: it's only used by the test suite
  in a LD_PRELOAD fashion.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jslaby@suse.cz" date="1608292800">- Update to version 2.4.0:
  * po: Update cs and sr translations (from translationproject.org)
  * libkfont: Use only KDFONTOP
  * Added support for a few derivatives of neo
  * Fix use-after-free of pipe_cmd
  * Update solar24x32 font
  * vlock's pam config added to destination directory
  * Update sun12x22.psfu
  * libkeymap: unify non/unicode accent_table generation
  * libkeymap: note about --unicode use
  * libkeymap: remove last ushort
  * fi.map: use newly added deadkeys
  * Do not install internal library
  * Additional deadkeys
- Remove kbd-1.15.2-setfont-no-cruft.patch
  The old ioctls were finally dropped.</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Update the installed license file.
  COPYING is a symlink to LICENSE. Let's use this file directly.</changelog>
  <changelog author="kukuk@suse.com" date="1627041600">- Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
  Necessary for image based installations without admin made changes.</changelog>
  <changelog author="fvogt@suse.com" date="1642420800">- Add patch to fix random doubling of font sizes (bsc#1194698):
  * 0001-libkfont-Initialize-kfont_context-options.patch</changelog>
  <changelog author="fvogt@suse.com" date="1645444800">- Fix build without %_distconfdir (see bsc#1195679)</changelog>
  <changelog author="fbui@suse.com" date="1682596800">- Add 'ara' vc keymap (bsc#1210702)
  'ara' is slightly better than 'arabic' as it matches the name of its x11
  layout counterpart. Keep 'arabic' for backward compatibility sake.</changelog>
</package>
<package pkgid="0136a656c667256c63e3b9ce0cc787346931169049acba98e7cb8d4fc4419122" name="kbd" arch="s390x">
  <version epoch="0" ver="2.4.0" rel="150400.5.6.1"/>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- fbtest.c: include &lt;sys/sysmacros.h&gt; for major/minor</changelog>
  <changelog author="mvidner@suse.com" date="1568894400">- Allow YaST to select Iranian (Persian, Farsi) keyboard layout
  (bsc#1092920)</changelog>
  <changelog author="kukuk@suse.de" date="1575547200">- Move pam.d/vlock to /usr/etc</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578571200">- Use a UTF-8 capable locale, otherwise ckbcomp will not not able
  to do proper uppercase/lowercase conversions.
- Rebase cz-map.patch after UTF-8 changes.
- Skip compression/decompression of maps which are about to be
  discarded later (~30%). Avoid zgrep, which is a shell script
  spawning grep and gunzip for each input file.</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 2.2.0:
  * setfont: Add option -d to double size of font.
  * kbd_mode: Add -f option and deny dangerous mode switches
    without it.
  * Data files updates.
  * Fix gcc warnings and error with gcc-10 (boo#1160273).
  * Other fixes.
  * For a full list of changes see:
    https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
- Update home page.
- Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
  kbd-1.15.2-setfont-no-cruft.patch,
  kbd-1.15.5-loadkeys-search-path.patch.</changelog>
  <changelog author="lnussel@suse.de" date="1587470400">- drop broken kbd command as well as guess_encoding (boo#1170067)
- don't use subdirectory for legacy keymaps (boo#1166423)
- use fdupes</changelog>
  <changelog author="jslaby@suse.com" date="1597924800">- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600344000">- Fix kbd-1.15.5-loadkeys-search-path.patch to prefer xkb keymaps
  (boo#1176302).</changelog>
  <changelog author="sbrabec@suse.com" date="1600344001">- Make kbdsettings working in both bash and dash (boo#1175040).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600776000">- Refresh patch to fix build on non-x86 architecture broken
  by previous commit:
  * kbdsettings-nox86.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600948800">- Update to version 2.3.0:
  * Added libkfont library (internal yet).
  * Added Canadian Multilingual Standard keyboard map.
  * Added us1 that maps Right Alt to AltGr and Shift+Tab to
    Alt+Tab.
  * The dead_macron is used instead of macron in fi.map.
  * Added retries when switching to the console (chvt, openvt).
  * Added option -d to double size of font (setfont).
  * Added long options, help messages.
  * Added solar24x32 font.
  * Updated eurlatgr font.
  * Fixed problems with formatting man pages.
  * Fixed search path error (boo#1176854).
- Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
- Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
- Refresh kbd-1.15.2-setfont-no-cruft.patch and
  kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Do not package libtswrap.so.0: it's only used by the test suite
  in a LD_PRELOAD fashion.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jslaby@suse.cz" date="1608292800">- Update to version 2.4.0:
  * po: Update cs and sr translations (from translationproject.org)
  * libkfont: Use only KDFONTOP
  * Added support for a few derivatives of neo
  * Fix use-after-free of pipe_cmd
  * Update solar24x32 font
  * vlock's pam config added to destination directory
  * Update sun12x22.psfu
  * libkeymap: unify non/unicode accent_table generation
  * libkeymap: note about --unicode use
  * libkeymap: remove last ushort
  * fi.map: use newly added deadkeys
  * Do not install internal library
  * Additional deadkeys
- Remove kbd-1.15.2-setfont-no-cruft.patch
  The old ioctls were finally dropped.</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Update the installed license file.
  COPYING is a symlink to LICENSE. Let's use this file directly.</changelog>
  <changelog author="kukuk@suse.com" date="1627041600">- Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
  Necessary for image based installations without admin made changes.</changelog>
  <changelog author="fvogt@suse.com" date="1642420800">- Add patch to fix random doubling of font sizes (bsc#1194698):
  * 0001-libkfont-Initialize-kfont_context-options.patch</changelog>
  <changelog author="fvogt@suse.com" date="1645444800">- Fix build without %_distconfdir (see bsc#1195679)</changelog>
  <changelog author="fbui@suse.com" date="1682596800">- Add 'ara' vc keymap (bsc#1210702)
  'ara' is slightly better than 'arabic' as it matches the name of its x11
  layout counterpart. Keep 'arabic' for backward compatibility sake.</changelog>
</package>
<package pkgid="3229ac5549ad4b311a3a06b0b2c2be731877617fefb354bc1021004ded8b2c4d" name="kbd" arch="src">
  <version epoch="0" ver="2.4.0" rel="150400.5.6.1"/>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- fbtest.c: include &lt;sys/sysmacros.h&gt; for major/minor</changelog>
  <changelog author="mvidner@suse.com" date="1568894400">- Allow YaST to select Iranian (Persian, Farsi) keyboard layout
  (bsc#1092920)</changelog>
  <changelog author="kukuk@suse.de" date="1575547200">- Move pam.d/vlock to /usr/etc</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578571200">- Use a UTF-8 capable locale, otherwise ckbcomp will not not able
  to do proper uppercase/lowercase conversions.
- Rebase cz-map.patch after UTF-8 changes.
- Skip compression/decompression of maps which are about to be
  discarded later (~30%). Avoid zgrep, which is a shell script
  spawning grep and gunzip for each input file.</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 2.2.0:
  * setfont: Add option -d to double size of font.
  * kbd_mode: Add -f option and deny dangerous mode switches
    without it.
  * Data files updates.
  * Fix gcc warnings and error with gcc-10 (boo#1160273).
  * Other fixes.
  * For a full list of changes see:
    https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
- Update home page.
- Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
  kbd-1.15.2-setfont-no-cruft.patch,
  kbd-1.15.5-loadkeys-search-path.patch.</changelog>
  <changelog author="lnussel@suse.de" date="1587470400">- drop broken kbd command as well as guess_encoding (boo#1170067)
- don't use subdirectory for legacy keymaps (boo#1166423)
- use fdupes</changelog>
  <changelog author="jslaby@suse.com" date="1597924800">- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600344000">- Fix kbd-1.15.5-loadkeys-search-path.patch to prefer xkb keymaps
  (boo#1176302).</changelog>
  <changelog author="sbrabec@suse.com" date="1600344001">- Make kbdsettings working in both bash and dash (boo#1175040).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600776000">- Refresh patch to fix build on non-x86 architecture broken
  by previous commit:
  * kbdsettings-nox86.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600948800">- Update to version 2.3.0:
  * Added libkfont library (internal yet).
  * Added Canadian Multilingual Standard keyboard map.
  * Added us1 that maps Right Alt to AltGr and Shift+Tab to
    Alt+Tab.
  * The dead_macron is used instead of macron in fi.map.
  * Added retries when switching to the console (chvt, openvt).
  * Added option -d to double size of font (setfont).
  * Added long options, help messages.
  * Added solar24x32 font.
  * Updated eurlatgr font.
  * Fixed problems with formatting man pages.
  * Fixed search path error (boo#1176854).
- Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
- Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
- Refresh kbd-1.15.2-setfont-no-cruft.patch and
  kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Do not package libtswrap.so.0: it's only used by the test suite
  in a LD_PRELOAD fashion.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jslaby@suse.cz" date="1608292800">- Update to version 2.4.0:
  * po: Update cs and sr translations (from translationproject.org)
  * libkfont: Use only KDFONTOP
  * Added support for a few derivatives of neo
  * Fix use-after-free of pipe_cmd
  * Update solar24x32 font
  * vlock's pam config added to destination directory
  * Update sun12x22.psfu
  * libkeymap: unify non/unicode accent_table generation
  * libkeymap: note about --unicode use
  * libkeymap: remove last ushort
  * fi.map: use newly added deadkeys
  * Do not install internal library
  * Additional deadkeys
- Remove kbd-1.15.2-setfont-no-cruft.patch
  The old ioctls were finally dropped.</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Update the installed license file.
  COPYING is a symlink to LICENSE. Let's use this file directly.</changelog>
  <changelog author="kukuk@suse.com" date="1627041600">- Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
  Necessary for image based installations without admin made changes.</changelog>
  <changelog author="fvogt@suse.com" date="1642420800">- Add patch to fix random doubling of font sizes (bsc#1194698):
  * 0001-libkfont-Initialize-kfont_context-options.patch</changelog>
  <changelog author="fvogt@suse.com" date="1645444800">- Fix build without %_distconfdir (see bsc#1195679)</changelog>
  <changelog author="fbui@suse.com" date="1682596800">- Add 'ara' vc keymap (bsc#1210702)
  'ara' is slightly better than 'arabic' as it matches the name of its x11
  layout counterpart. Keep 'arabic' for backward compatibility sake.</changelog>
</package>
<package pkgid="f8dc5a79cf35d8ffca58a58e2c4058d5b195fe9a2064886dc958711fae28a192" name="kbd" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="150400.5.6.1"/>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- fbtest.c: include &lt;sys/sysmacros.h&gt; for major/minor</changelog>
  <changelog author="mvidner@suse.com" date="1568894400">- Allow YaST to select Iranian (Persian, Farsi) keyboard layout
  (bsc#1092920)</changelog>
  <changelog author="kukuk@suse.de" date="1575547200">- Move pam.d/vlock to /usr/etc</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578571200">- Use a UTF-8 capable locale, otherwise ckbcomp will not not able
  to do proper uppercase/lowercase conversions.
- Rebase cz-map.patch after UTF-8 changes.
- Skip compression/decompression of maps which are about to be
  discarded later (~30%). Avoid zgrep, which is a shell script
  spawning grep and gunzip for each input file.</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 2.2.0:
  * setfont: Add option -d to double size of font.
  * kbd_mode: Add -f option and deny dangerous mode switches
    without it.
  * Data files updates.
  * Fix gcc warnings and error with gcc-10 (boo#1160273).
  * Other fixes.
  * For a full list of changes see:
    https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
- Update home page.
- Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
  kbd-1.15.2-setfont-no-cruft.patch,
  kbd-1.15.5-loadkeys-search-path.patch.</changelog>
  <changelog author="lnussel@suse.de" date="1587470400">- drop broken kbd command as well as guess_encoding (boo#1170067)
- don't use subdirectory for legacy keymaps (boo#1166423)
- use fdupes</changelog>
  <changelog author="jslaby@suse.com" date="1597924800">- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600344000">- Fix kbd-1.15.5-loadkeys-search-path.patch to prefer xkb keymaps
  (boo#1176302).</changelog>
  <changelog author="sbrabec@suse.com" date="1600344001">- Make kbdsettings working in both bash and dash (boo#1175040).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600776000">- Refresh patch to fix build on non-x86 architecture broken
  by previous commit:
  * kbdsettings-nox86.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600948800">- Update to version 2.3.0:
  * Added libkfont library (internal yet).
  * Added Canadian Multilingual Standard keyboard map.
  * Added us1 that maps Right Alt to AltGr and Shift+Tab to
    Alt+Tab.
  * The dead_macron is used instead of macron in fi.map.
  * Added retries when switching to the console (chvt, openvt).
  * Added option -d to double size of font (setfont).
  * Added long options, help messages.
  * Added solar24x32 font.
  * Updated eurlatgr font.
  * Fixed problems with formatting man pages.
  * Fixed search path error (boo#1176854).
- Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
- Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
- Refresh kbd-1.15.2-setfont-no-cruft.patch and
  kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Do not package libtswrap.so.0: it's only used by the test suite
  in a LD_PRELOAD fashion.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jslaby@suse.cz" date="1608292800">- Update to version 2.4.0:
  * po: Update cs and sr translations (from translationproject.org)
  * libkfont: Use only KDFONTOP
  * Added support for a few derivatives of neo
  * Fix use-after-free of pipe_cmd
  * Update solar24x32 font
  * vlock's pam config added to destination directory
  * Update sun12x22.psfu
  * libkeymap: unify non/unicode accent_table generation
  * libkeymap: note about --unicode use
  * libkeymap: remove last ushort
  * fi.map: use newly added deadkeys
  * Do not install internal library
  * Additional deadkeys
- Remove kbd-1.15.2-setfont-no-cruft.patch
  The old ioctls were finally dropped.</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Update the installed license file.
  COPYING is a symlink to LICENSE. Let's use this file directly.</changelog>
  <changelog author="kukuk@suse.com" date="1627041600">- Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
  Necessary for image based installations without admin made changes.</changelog>
  <changelog author="fvogt@suse.com" date="1642420800">- Add patch to fix random doubling of font sizes (bsc#1194698):
  * 0001-libkfont-Initialize-kfont_context-options.patch</changelog>
  <changelog author="fvogt@suse.com" date="1645444800">- Fix build without %_distconfdir (see bsc#1195679)</changelog>
  <changelog author="fbui@suse.com" date="1682596800">- Add 'ara' vc keymap (bsc#1210702)
  'ara' is slightly better than 'arabic' as it matches the name of its x11
  layout counterpart. Keep 'arabic' for backward compatibility sake.</changelog>
</package>
<package pkgid="c3d3cac6ead0412aa99fb4c26e356e033faca8bc42c57f3df6979e41b1ea0b09" name="kbd-legacy" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="150400.5.6.1"/>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- fbtest.c: include &lt;sys/sysmacros.h&gt; for major/minor</changelog>
  <changelog author="mvidner@suse.com" date="1568894400">- Allow YaST to select Iranian (Persian, Farsi) keyboard layout
  (bsc#1092920)</changelog>
  <changelog author="kukuk@suse.de" date="1575547200">- Move pam.d/vlock to /usr/etc</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578571200">- Use a UTF-8 capable locale, otherwise ckbcomp will not not able
  to do proper uppercase/lowercase conversions.
- Rebase cz-map.patch after UTF-8 changes.
- Skip compression/decompression of maps which are about to be
  discarded later (~30%). Avoid zgrep, which is a shell script
  spawning grep and gunzip for each input file.</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 2.2.0:
  * setfont: Add option -d to double size of font.
  * kbd_mode: Add -f option and deny dangerous mode switches
    without it.
  * Data files updates.
  * Fix gcc warnings and error with gcc-10 (boo#1160273).
  * Other fixes.
  * For a full list of changes see:
    https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
- Update home page.
- Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
  kbd-1.15.2-setfont-no-cruft.patch,
  kbd-1.15.5-loadkeys-search-path.patch.</changelog>
  <changelog author="lnussel@suse.de" date="1587470400">- drop broken kbd command as well as guess_encoding (boo#1170067)
- don't use subdirectory for legacy keymaps (boo#1166423)
- use fdupes</changelog>
  <changelog author="jslaby@suse.com" date="1597924800">- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600344000">- Fix kbd-1.15.5-loadkeys-search-path.patch to prefer xkb keymaps
  (boo#1176302).</changelog>
  <changelog author="sbrabec@suse.com" date="1600344001">- Make kbdsettings working in both bash and dash (boo#1175040).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600776000">- Refresh patch to fix build on non-x86 architecture broken
  by previous commit:
  * kbdsettings-nox86.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600948800">- Update to version 2.3.0:
  * Added libkfont library (internal yet).
  * Added Canadian Multilingual Standard keyboard map.
  * Added us1 that maps Right Alt to AltGr and Shift+Tab to
    Alt+Tab.
  * The dead_macron is used instead of macron in fi.map.
  * Added retries when switching to the console (chvt, openvt).
  * Added option -d to double size of font (setfont).
  * Added long options, help messages.
  * Added solar24x32 font.
  * Updated eurlatgr font.
  * Fixed problems with formatting man pages.
  * Fixed search path error (boo#1176854).
- Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
- Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
- Refresh kbd-1.15.2-setfont-no-cruft.patch and
  kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Do not package libtswrap.so.0: it's only used by the test suite
  in a LD_PRELOAD fashion.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jslaby@suse.cz" date="1608292800">- Update to version 2.4.0:
  * po: Update cs and sr translations (from translationproject.org)
  * libkfont: Use only KDFONTOP
  * Added support for a few derivatives of neo
  * Fix use-after-free of pipe_cmd
  * Update solar24x32 font
  * vlock's pam config added to destination directory
  * Update sun12x22.psfu
  * libkeymap: unify non/unicode accent_table generation
  * libkeymap: note about --unicode use
  * libkeymap: remove last ushort
  * fi.map: use newly added deadkeys
  * Do not install internal library
  * Additional deadkeys
- Remove kbd-1.15.2-setfont-no-cruft.patch
  The old ioctls were finally dropped.</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Update the installed license file.
  COPYING is a symlink to LICENSE. Let's use this file directly.</changelog>
  <changelog author="kukuk@suse.com" date="1627041600">- Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
  Necessary for image based installations without admin made changes.</changelog>
  <changelog author="fvogt@suse.com" date="1642420800">- Add patch to fix random doubling of font sizes (bsc#1194698):
  * 0001-libkfont-Initialize-kfont_context-options.patch</changelog>
  <changelog author="fvogt@suse.com" date="1645444800">- Fix build without %_distconfdir (see bsc#1195679)</changelog>
  <changelog author="fbui@suse.com" date="1682596800">- Add 'ara' vc keymap (bsc#1210702)
  'ara' is slightly better than 'arabic' as it matches the name of its x11
  layout counterpart. Keep 'arabic' for backward compatibility sake.</changelog>
</package>
<package pkgid="50f896585f2a2c2ccdf01ad6862587347d50a0f63f28b17274176d5928dacb76" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.60.1"/>
  <changelog author="tiwai@suse.de" date="1680782400">- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report
  DMI table (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer
  (git-fixes).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
  (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
  (git-fixes).
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
  (git-fixes).
- commit 83ef835</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1680782401">- Update
  patches.suse/Fix-double-fget-in-vhost_net_set_backend.patch
  (git-fixes bsc#1210203 CVE-2023-1838).
  Added CVE reference.
- commit 39f99de</changelog>
  <changelog author="fdmanana@suse.com" date="1680782402">- btrfs: fix race between quota disable and quota assign ioctls
  (CVE-2023-1611 bsc#1209687).
- commit dcf095c</changelog>
  <changelog author="tiwai@suse.de" date="1680868800">- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT
  events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory
  access (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for
  non-uploaded sta (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: cros-ec: Explicitly set .polarity in .get_state()
  (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
  (git-fixes).
- platform/x86: think-lmi: Clean up display of current_value on
  Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing
  ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current
  settings (git-fixes).
- commit a8eaaa9</changelog>
  <changelog author="tiwai@suse.de" date="1680868801">- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
  (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP
  platform (git-fixes).
- commit f336cd9</changelog>
  <changelog author="tiwai@suse.de" date="1680955200">- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it
  (git-fixes).
- commit b56644c</changelog>
  <changelog author="tiwai@suse.de" date="1681041600">- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
  (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit
  (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present
  (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete
  when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
  (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler
  (git-fixes).
- usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- usb: typec: altmodes/displayport: Fix configure initial pin
  assignment (git-fixes).
- xhci: Free the command allocated for setting LPM if we return
  early (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough
  iommu (git-fixes).
- usb: xhci: tegra: fix sleep in atomic call (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- commit 3aae146</changelog>
  <changelog author="tiwai@suse.de" date="1681041601">- kABI workaround for xhci (git-fixes).
- commit cbab93c</changelog>
  <changelog author="palcantara@suse.de" date="1681128000">- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- commit cdf6666</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214400">- tracing: Fix wrong return in kprobe_event_gen_test.c
  (git-fixes).
- commit f76dcf0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214401">- mm: mmap: remove newline at the end of the trace (git-fixes).
- commit 01340e1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214402">- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- commit cb9e9b0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214403">- ring-buffer: Fix race while reader and writer are on the same
  page (git-fixes).
- commit c740036</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214404">- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- commit 46954c5</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214405">- tracing: Have tracing_snapshot_instance_cond() write errors
  to the appropriate instance (git-fixes).
- commit b3421ec</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214406">- tracing: Free error logs of tracing instances (git-fixes).
- commit b4f001c</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214407">- ftrace: Fix issue that 'direct-&gt;addr' not restored in
  modify_ftrace_direct() (git-fixes).
- commit 03fd814</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214408">- blacklist.conf: add a not-relevant ftrace commit
- commit 2220417</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214409">- tracing: Add trace_array_puts() to write into instance
  (git-fixes).
- commit 059865f</changelog>
  <changelog author="tiwai@suse.de" date="1681300800">- mtd: rawnand: meson: fix bitmask for length in command word
  (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking
  tRC_min (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
  (git-fixes).
- commit 6504d96</changelog>
</package>
<package pkgid="b256975f29e4279f94a04f9f839159ca1d09e5b5dc67a9d04bf0b82849bf8dd1" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.60.1"/>
  <changelog author="tiwai@suse.de" date="1680782400">- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report
  DMI table (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer
  (git-fixes).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
  (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
  (git-fixes).
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
  (git-fixes).
- commit 83ef835</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1680782401">- Update
  patches.suse/Fix-double-fget-in-vhost_net_set_backend.patch
  (git-fixes bsc#1210203 CVE-2023-1838).
  Added CVE reference.
- commit 39f99de</changelog>
  <changelog author="fdmanana@suse.com" date="1680782402">- btrfs: fix race between quota disable and quota assign ioctls
  (CVE-2023-1611 bsc#1209687).
- commit dcf095c</changelog>
  <changelog author="tiwai@suse.de" date="1680868800">- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT
  events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory
  access (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for
  non-uploaded sta (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: cros-ec: Explicitly set .polarity in .get_state()
  (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
  (git-fixes).
- platform/x86: think-lmi: Clean up display of current_value on
  Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing
  ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current
  settings (git-fixes).
- commit a8eaaa9</changelog>
  <changelog author="tiwai@suse.de" date="1680868801">- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
  (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP
  platform (git-fixes).
- commit f336cd9</changelog>
  <changelog author="tiwai@suse.de" date="1680955200">- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it
  (git-fixes).
- commit b56644c</changelog>
  <changelog author="tiwai@suse.de" date="1681041600">- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
  (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit
  (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present
  (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete
  when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
  (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler
  (git-fixes).
- usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- usb: typec: altmodes/displayport: Fix configure initial pin
  assignment (git-fixes).
- xhci: Free the command allocated for setting LPM if we return
  early (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough
  iommu (git-fixes).
- usb: xhci: tegra: fix sleep in atomic call (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- commit 3aae146</changelog>
  <changelog author="tiwai@suse.de" date="1681041601">- kABI workaround for xhci (git-fixes).
- commit cbab93c</changelog>
  <changelog author="palcantara@suse.de" date="1681128000">- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- commit cdf6666</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214400">- tracing: Fix wrong return in kprobe_event_gen_test.c
  (git-fixes).
- commit f76dcf0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214401">- mm: mmap: remove newline at the end of the trace (git-fixes).
- commit 01340e1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214402">- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- commit cb9e9b0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214403">- ring-buffer: Fix race while reader and writer are on the same
  page (git-fixes).
- commit c740036</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214404">- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- commit 46954c5</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214405">- tracing: Have tracing_snapshot_instance_cond() write errors
  to the appropriate instance (git-fixes).
- commit b3421ec</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214406">- tracing: Free error logs of tracing instances (git-fixes).
- commit b4f001c</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214407">- ftrace: Fix issue that 'direct-&gt;addr' not restored in
  modify_ftrace_direct() (git-fixes).
- commit 03fd814</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214408">- blacklist.conf: add a not-relevant ftrace commit
- commit 2220417</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214409">- tracing: Add trace_array_puts() to write into instance
  (git-fixes).
- commit 059865f</changelog>
  <changelog author="tiwai@suse.de" date="1681300800">- mtd: rawnand: meson: fix bitmask for length in command word
  (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking
  tRC_min (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
  (git-fixes).
- commit 6504d96</changelog>
</package>
<package pkgid="db084a217a4838c8f52ccbd1fd5985feb56a67b37f63d3e4e11a405a0cce7349" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.60.1"/>
  <changelog author="tiwai@suse.de" date="1680782400">- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report
  DMI table (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer
  (git-fixes).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
  (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
  (git-fixes).
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
  (git-fixes).
- commit 83ef835</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1680782401">- Update
  patches.suse/Fix-double-fget-in-vhost_net_set_backend.patch
  (git-fixes bsc#1210203 CVE-2023-1838).
  Added CVE reference.
- commit 39f99de</changelog>
  <changelog author="fdmanana@suse.com" date="1680782402">- btrfs: fix race between quota disable and quota assign ioctls
  (CVE-2023-1611 bsc#1209687).
- commit dcf095c</changelog>
  <changelog author="tiwai@suse.de" date="1680868800">- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT
  events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory
  access (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for
  non-uploaded sta (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: cros-ec: Explicitly set .polarity in .get_state()
  (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
  (git-fixes).
- platform/x86: think-lmi: Clean up display of current_value on
  Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing
  ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current
  settings (git-fixes).
- commit a8eaaa9</changelog>
  <changelog author="tiwai@suse.de" date="1680868801">- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
  (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP
  platform (git-fixes).
- commit f336cd9</changelog>
  <changelog author="tiwai@suse.de" date="1680955200">- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it
  (git-fixes).
- commit b56644c</changelog>
  <changelog author="tiwai@suse.de" date="1681041600">- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
  (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit
  (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present
  (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete
  when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
  (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler
  (git-fixes).
- usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- usb: typec: altmodes/displayport: Fix configure initial pin
  assignment (git-fixes).
- xhci: Free the command allocated for setting LPM if we return
  early (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough
  iommu (git-fixes).
- usb: xhci: tegra: fix sleep in atomic call (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- commit 3aae146</changelog>
  <changelog author="tiwai@suse.de" date="1681041601">- kABI workaround for xhci (git-fixes).
- commit cbab93c</changelog>
  <changelog author="palcantara@suse.de" date="1681128000">- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- commit cdf6666</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214400">- tracing: Fix wrong return in kprobe_event_gen_test.c
  (git-fixes).
- commit f76dcf0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214401">- mm: mmap: remove newline at the end of the trace (git-fixes).
- commit 01340e1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214402">- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- commit cb9e9b0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214403">- ring-buffer: Fix race while reader and writer are on the same
  page (git-fixes).
- commit c740036</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214404">- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- commit 46954c5</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214405">- tracing: Have tracing_snapshot_instance_cond() write errors
  to the appropriate instance (git-fixes).
- commit b3421ec</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214406">- tracing: Free error logs of tracing instances (git-fixes).
- commit b4f001c</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214407">- ftrace: Fix issue that 'direct-&gt;addr' not restored in
  modify_ftrace_direct() (git-fixes).
- commit 03fd814</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214408">- blacklist.conf: add a not-relevant ftrace commit
- commit 2220417</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214409">- tracing: Add trace_array_puts() to write into instance
  (git-fixes).
- commit 059865f</changelog>
  <changelog author="tiwai@suse.de" date="1681300800">- mtd: rawnand: meson: fix bitmask for length in command word
  (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking
  tRC_min (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
  (git-fixes).
- commit 6504d96</changelog>
</package>
<package pkgid="a6e164202996e2623bc338352e3b4e38e907098e017eb00097a8cf58f2b3a770" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.60.1"/>
  <changelog author="tiwai@suse.de" date="1680782400">- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report
  DMI table (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer
  (git-fixes).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
  (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
  (git-fixes).
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
  (git-fixes).
- commit 83ef835</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1680782401">- Update
  patches.suse/Fix-double-fget-in-vhost_net_set_backend.patch
  (git-fixes bsc#1210203 CVE-2023-1838).
  Added CVE reference.
- commit 39f99de</changelog>
  <changelog author="fdmanana@suse.com" date="1680782402">- btrfs: fix race between quota disable and quota assign ioctls
  (CVE-2023-1611 bsc#1209687).
- commit dcf095c</changelog>
  <changelog author="tiwai@suse.de" date="1680868800">- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT
  events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory
  access (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for
  non-uploaded sta (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: cros-ec: Explicitly set .polarity in .get_state()
  (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
  (git-fixes).
- platform/x86: think-lmi: Clean up display of current_value on
  Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing
  ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current
  settings (git-fixes).
- commit a8eaaa9</changelog>
  <changelog author="tiwai@suse.de" date="1680868801">- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
  (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP
  platform (git-fixes).
- commit f336cd9</changelog>
  <changelog author="tiwai@suse.de" date="1680955200">- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it
  (git-fixes).
- commit b56644c</changelog>
  <changelog author="tiwai@suse.de" date="1681041600">- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
  (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit
  (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present
  (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete
  when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
  (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler
  (git-fixes).
- usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- usb: typec: altmodes/displayport: Fix configure initial pin
  assignment (git-fixes).
- xhci: Free the command allocated for setting LPM if we return
  early (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough
  iommu (git-fixes).
- usb: xhci: tegra: fix sleep in atomic call (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- commit 3aae146</changelog>
  <changelog author="tiwai@suse.de" date="1681041601">- kABI workaround for xhci (git-fixes).
- commit cbab93c</changelog>
  <changelog author="palcantara@suse.de" date="1681128000">- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- commit cdf6666</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214400">- tracing: Fix wrong return in kprobe_event_gen_test.c
  (git-fixes).
- commit f76dcf0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214401">- mm: mmap: remove newline at the end of the trace (git-fixes).
- commit 01340e1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214402">- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- commit cb9e9b0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214403">- ring-buffer: Fix race while reader and writer are on the same
  page (git-fixes).
- commit c740036</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214404">- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- commit 46954c5</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214405">- tracing: Have tracing_snapshot_instance_cond() write errors
  to the appropriate instance (git-fixes).
- commit b3421ec</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214406">- tracing: Free error logs of tracing instances (git-fixes).
- commit b4f001c</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214407">- ftrace: Fix issue that 'direct-&gt;addr' not restored in
  modify_ftrace_direct() (git-fixes).
- commit 03fd814</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214408">- blacklist.conf: add a not-relevant ftrace commit
- commit 2220417</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214409">- tracing: Add trace_array_puts() to write into instance
  (git-fixes).
- commit 059865f</changelog>
  <changelog author="tiwai@suse.de" date="1681300800">- mtd: rawnand: meson: fix bitmask for length in command word
  (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking
  tRC_min (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
  (git-fixes).
- commit 6504d96</changelog>
</package>
<package pkgid="cd71d7f3f9445803c1cad69d4cc4140cb8b2c846fbc13ee6543a2c1bdd1cc438" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.63.1"/>
  <changelog author="dwagner@suse.de" date="1682596800">- nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -&gt; {HARDIRQ-ON-W}
  usage" (git-fixes).
- nvme: fix async event trace event (git-fixes).
- nvmet: fix I/O Command Set specific Identify Controller
  (git-fixes).
- nvmet: fix Identify Active Namespace ID list handling
  (git-fixes).
- nvmet: fix Identify Controller handling (git-fixes).
- nvmet: fix Identify Namespace handling (git-fixes).
- commit da5f4d4</changelog>
  <changelog author="jack@suse.cz" date="1682596801">- ext4: use ext4_journal_start/stop for fast commit transactions
  (bsc#1210793).
  Refresh patches.suse/ext4-fast-commit-may-not-fallback-for-ineligible-com.patch
  patches.suse/ext4-fix-fallocate-to-use-file_modified-to-update-pe.patch
  patches.suse/ext4-fix-race-condition-between-ext4_write-and-ext4_.patch
- commit b470a11</changelog>
  <changelog author="dwagner@suse.de" date="1682596802">- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
- commit da2e21e</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1682596803">- Update
  patches.suse/net-mlx5-DR-Fix-NULL-vs-IS_ERR-checking-in-dr_domain.patch
  (jsc#SLE-19253 bsc#1208845 CVE-2023-23006).
  Added CVE reference.
- commit 53f1f7b</changelog>
  <changelog author="dwagner@suse.de" date="1682596804">- blacklist.conf: add nvme git-fixes
- commit be17720</changelog>
  <changelog author="dwagner@suse.de" date="1682683200">- kabi/severities: ignore KABI for NVMe target (bsc#1174777)
  The target code is only for testing and there are no external users.
- commit a8c10fa</changelog>
  <changelog author="tiwai@suse.de" date="1682683201">- virtio_ring: don't update event idx on get_buf (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  (git-fixes).
- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property
  (git-fixes).
- vmci_host: fix a race condition in vmci_host_poll() causing GPF
  (git-fixes).
- fpga: bridge: fix kernel-doc parameter description (git-fixes).
- driver core: Don't require dynamic_debug for initcall_debug
  probe timing (git-fixes).
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
  (git-fixes).
- staging: iio: resolver: ads1210: fix config mode (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  rtw_scan_timeout_handler() (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  _rtw_join_timeout_handler() (git-fixes).
- serial: 8250: Add missing wakeup event reporting (git-fixes).
- tty: serial: fsl_lpuart: adjust buffer length to the intended
  size (git-fixes).
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  (git-fixes).
- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
- xhci: fix debugfs register accesses while suspended (git-fixes).
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix use after free bug in
  renesas_usb3_remove due to race condition (git-fixes).
- usb: dwc3: gadget: Change condition for processing suspend event
  (git-fixes).
- usb: host: xhci-rcar: remove leftover quirk handling
  (git-fixes).
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on
  error path (git-fixes).
- ipmi: fix SSIF not responding under certain cond (git-fixes).
- ipmi:ssif: Add send_retries increment (git-fixes).
- spi: cadence-quadspi: fix suspend-resume implementations
  (git-fixes).
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
- spi: qup: Don't skip cleanup in remove's error path (git-fixes).
- ASoC: fsl_mqs: move of_node_put() to the correct location
  (git-fixes).
- ASoC: es8316: Handle optional IRQ assignment (git-fixes).
- ASoC: cs35l41: Only disable internal boost (git-fixes).
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config
  (git-fixes).
- PCI: imx6: Install the fault handler only on compatible match
  (git-fixes).
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and
  device_lock (git-fixes).
- PCI/EDR: Clear Device Status after EDR error recovery
  (git-fixes).
- drm/panel: otm8009a: Set backlight parent to panel device
  (git-fixes).
- commit 30ae662</changelog>
  <changelog author="petr.pavlu@suse.com" date="1682683202">- keys: Fix linking a duplicate key to a keyring's assoc_array
  (bsc#1207088).
- commit 52b6749</changelog>
  <changelog author="ykaukab@suse.de" date="1682683203">- ACPI: CPPC: Disable FIE if registers in PCC regions
  (bsc#1210953).
- cpufreq: CPPC: Fix build error without
  CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
- commit 5d50d5f</changelog>
  <changelog author="dwagner@suse.de" date="1682683204">- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
- scsi: lpfc: Silence an incorrect device output (bsc#1210943).
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  (bsc#1210943).
- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting()
  (bsc#1210943).
- scsi: lpfc: Copyright updates for 14.2.0.11 patches
  (bsc#1210943).
- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation
  logic (bsc#1210943).
- scsi: lpfc: Skip waiting for register ready bits when in
  unrecoverable state (bsc#1210943).
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with
  no recovery (bsc#1210943).
- scsi: lpfc: Defer issuing new PLOGI if received RSCN before
  completing REG_LOGIN (bsc#1210943).
- scsi: lpfc: Record LOGO state with discovery engine even if
  aborted (bsc#1210943).
- scsi: lpfc: Fix lockdep warning for rx_monitor lock when
  unloading driver (bsc#1210943).
- scsi: lpfc: Reorder freeing of various DMA buffers and their
  list removal (bsc#1210943).
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer
  overflow (bsc#1210943).
- cpumask: fix incorrect cpumask scanning result checks
  (bsc#1210943).
- scsi: lpfc: Fix double word in comments (bsc#1210943).
- scsi: scsi_transport_fc: Add an additional flag to
  fc_host_fpin_rcv() (bsc#1210943).
- commit 7354766</changelog>
  <changelog author="dwagner@suse.de" date="1682683205">- nvme: send Identify with CNS 06h only to I/O controllers
  (bsc#1209693).
- commit fe51de7</changelog>
  <changelog author="dfaggioli@suse.com" date="1682683206">- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (bsc#1206992
  CVE-2022-2196).
- commit 2cab1a4</changelog>
  <changelog author="neilb@suse.de" date="1682942400">- NFS: Cleanup unused rpc_clnt variable (git-fixes).
- NFSD: callback request does not use correct credential for
  AUTH_SYS (git-fixes).
- sunrpc: only free unix grouplist after RCU settles (git-fixes).
- nfsd: call op_release, even when op_func returns an error
  (git-fixes).
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
  (git-fixes).
- commit aa8b700</changelog>
  <changelog author="tiwai@suse.de" date="1682942401">- power: supply: generic-adc-battery: fix unit scaling
  (git-fixes).
- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if'
  match (git-fixes).
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src
  to reparent (git-fixes).
- clk: add missing of_node_put() in "assigned-clocks" property
  parsing (git-fixes).
- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
- clocksource/drivers/davinci: Fix memory leak in
  davinci_timer_register when init fails (git-fixes).
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
  (git-fixes).
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  (git-fixes).
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
  (git-fixes).
- selftests/kselftest/runner/run_one(): allow running
  non-executable files (git-fixes).
- commit fc18250</changelog>
  <changelog author="tiwai@suse.de" date="1683028800">- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
  (git-fixes).
- Input: hp_sdc_rtc - mark an unused function as __maybe_unused
  (git-fixes).
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current
  time (git-fixes).
- rtc: omap: include header for omap_rtc_power_off_program
  prototype (git-fixes).
- commit 4f6ef5f</changelog>
  <changelog author="mgorman@suse.de" date="1683028801">- locking/rwbase: Mitigate indefinite writer starvation.
  Move out of sorted as the patch has moved within the tip tree.
- commit 0ba915d</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028802">- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
- commit f115e36</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028803">- blacklist.conf: Exclude unrelated kconfig patch
- commit 2595126</changelog>
  <changelog author="mhocko@suse.com" date="1683028804">- Update
  patches.suse/perf-Fix-check-before-add_event_to_groups-in-perf_group_detach.patch
  (git fixes, bsc#1210986, CVE-2023-2235).
- commit c5399e7</changelog>
  <changelog author="vbabka@suse.cz" date="1683028805">- mm: take a page reference when removing device exclusive entries
  (bsc#1211025).
- commit fd0cc4f</changelog>
</package>
<package pkgid="085b27c5fa1d7cf173a109784e2f13d66a4710ad01161c71731b1972d2f1f9e7" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.63.1"/>
  <changelog author="dwagner@suse.de" date="1682596800">- nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -&gt; {HARDIRQ-ON-W}
  usage" (git-fixes).
- nvme: fix async event trace event (git-fixes).
- nvmet: fix I/O Command Set specific Identify Controller
  (git-fixes).
- nvmet: fix Identify Active Namespace ID list handling
  (git-fixes).
- nvmet: fix Identify Controller handling (git-fixes).
- nvmet: fix Identify Namespace handling (git-fixes).
- commit da5f4d4</changelog>
  <changelog author="jack@suse.cz" date="1682596801">- ext4: use ext4_journal_start/stop for fast commit transactions
  (bsc#1210793).
  Refresh patches.suse/ext4-fast-commit-may-not-fallback-for-ineligible-com.patch
  patches.suse/ext4-fix-fallocate-to-use-file_modified-to-update-pe.patch
  patches.suse/ext4-fix-race-condition-between-ext4_write-and-ext4_.patch
- commit b470a11</changelog>
  <changelog author="dwagner@suse.de" date="1682596802">- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
- commit da2e21e</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1682596803">- Update
  patches.suse/net-mlx5-DR-Fix-NULL-vs-IS_ERR-checking-in-dr_domain.patch
  (jsc#SLE-19253 bsc#1208845 CVE-2023-23006).
  Added CVE reference.
- commit 53f1f7b</changelog>
  <changelog author="dwagner@suse.de" date="1682596804">- blacklist.conf: add nvme git-fixes
- commit be17720</changelog>
  <changelog author="dwagner@suse.de" date="1682683200">- kabi/severities: ignore KABI for NVMe target (bsc#1174777)
  The target code is only for testing and there are no external users.
- commit a8c10fa</changelog>
  <changelog author="tiwai@suse.de" date="1682683201">- virtio_ring: don't update event idx on get_buf (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  (git-fixes).
- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property
  (git-fixes).
- vmci_host: fix a race condition in vmci_host_poll() causing GPF
  (git-fixes).
- fpga: bridge: fix kernel-doc parameter description (git-fixes).
- driver core: Don't require dynamic_debug for initcall_debug
  probe timing (git-fixes).
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
  (git-fixes).
- staging: iio: resolver: ads1210: fix config mode (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  rtw_scan_timeout_handler() (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  _rtw_join_timeout_handler() (git-fixes).
- serial: 8250: Add missing wakeup event reporting (git-fixes).
- tty: serial: fsl_lpuart: adjust buffer length to the intended
  size (git-fixes).
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  (git-fixes).
- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
- xhci: fix debugfs register accesses while suspended (git-fixes).
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix use after free bug in
  renesas_usb3_remove due to race condition (git-fixes).
- usb: dwc3: gadget: Change condition for processing suspend event
  (git-fixes).
- usb: host: xhci-rcar: remove leftover quirk handling
  (git-fixes).
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on
  error path (git-fixes).
- ipmi: fix SSIF not responding under certain cond (git-fixes).
- ipmi:ssif: Add send_retries increment (git-fixes).
- spi: cadence-quadspi: fix suspend-resume implementations
  (git-fixes).
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
- spi: qup: Don't skip cleanup in remove's error path (git-fixes).
- ASoC: fsl_mqs: move of_node_put() to the correct location
  (git-fixes).
- ASoC: es8316: Handle optional IRQ assignment (git-fixes).
- ASoC: cs35l41: Only disable internal boost (git-fixes).
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config
  (git-fixes).
- PCI: imx6: Install the fault handler only on compatible match
  (git-fixes).
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and
  device_lock (git-fixes).
- PCI/EDR: Clear Device Status after EDR error recovery
  (git-fixes).
- drm/panel: otm8009a: Set backlight parent to panel device
  (git-fixes).
- commit 30ae662</changelog>
  <changelog author="petr.pavlu@suse.com" date="1682683202">- keys: Fix linking a duplicate key to a keyring's assoc_array
  (bsc#1207088).
- commit 52b6749</changelog>
  <changelog author="ykaukab@suse.de" date="1682683203">- ACPI: CPPC: Disable FIE if registers in PCC regions
  (bsc#1210953).
- cpufreq: CPPC: Fix build error without
  CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
- commit 5d50d5f</changelog>
  <changelog author="dwagner@suse.de" date="1682683204">- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
- scsi: lpfc: Silence an incorrect device output (bsc#1210943).
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  (bsc#1210943).
- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting()
  (bsc#1210943).
- scsi: lpfc: Copyright updates for 14.2.0.11 patches
  (bsc#1210943).
- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation
  logic (bsc#1210943).
- scsi: lpfc: Skip waiting for register ready bits when in
  unrecoverable state (bsc#1210943).
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with
  no recovery (bsc#1210943).
- scsi: lpfc: Defer issuing new PLOGI if received RSCN before
  completing REG_LOGIN (bsc#1210943).
- scsi: lpfc: Record LOGO state with discovery engine even if
  aborted (bsc#1210943).
- scsi: lpfc: Fix lockdep warning for rx_monitor lock when
  unloading driver (bsc#1210943).
- scsi: lpfc: Reorder freeing of various DMA buffers and their
  list removal (bsc#1210943).
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer
  overflow (bsc#1210943).
- cpumask: fix incorrect cpumask scanning result checks
  (bsc#1210943).
- scsi: lpfc: Fix double word in comments (bsc#1210943).
- scsi: scsi_transport_fc: Add an additional flag to
  fc_host_fpin_rcv() (bsc#1210943).
- commit 7354766</changelog>
  <changelog author="dwagner@suse.de" date="1682683205">- nvme: send Identify with CNS 06h only to I/O controllers
  (bsc#1209693).
- commit fe51de7</changelog>
  <changelog author="dfaggioli@suse.com" date="1682683206">- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (bsc#1206992
  CVE-2022-2196).
- commit 2cab1a4</changelog>
  <changelog author="neilb@suse.de" date="1682942400">- NFS: Cleanup unused rpc_clnt variable (git-fixes).
- NFSD: callback request does not use correct credential for
  AUTH_SYS (git-fixes).
- sunrpc: only free unix grouplist after RCU settles (git-fixes).
- nfsd: call op_release, even when op_func returns an error
  (git-fixes).
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
  (git-fixes).
- commit aa8b700</changelog>
  <changelog author="tiwai@suse.de" date="1682942401">- power: supply: generic-adc-battery: fix unit scaling
  (git-fixes).
- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if'
  match (git-fixes).
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src
  to reparent (git-fixes).
- clk: add missing of_node_put() in "assigned-clocks" property
  parsing (git-fixes).
- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
- clocksource/drivers/davinci: Fix memory leak in
  davinci_timer_register when init fails (git-fixes).
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
  (git-fixes).
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  (git-fixes).
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
  (git-fixes).
- selftests/kselftest/runner/run_one(): allow running
  non-executable files (git-fixes).
- commit fc18250</changelog>
  <changelog author="tiwai@suse.de" date="1683028800">- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
  (git-fixes).
- Input: hp_sdc_rtc - mark an unused function as __maybe_unused
  (git-fixes).
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current
  time (git-fixes).
- rtc: omap: include header for omap_rtc_power_off_program
  prototype (git-fixes).
- commit 4f6ef5f</changelog>
  <changelog author="mgorman@suse.de" date="1683028801">- locking/rwbase: Mitigate indefinite writer starvation.
  Move out of sorted as the patch has moved within the tip tree.
- commit 0ba915d</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028802">- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
- commit f115e36</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028803">- blacklist.conf: Exclude unrelated kconfig patch
- commit 2595126</changelog>
  <changelog author="mhocko@suse.com" date="1683028804">- Update
  patches.suse/perf-Fix-check-before-add_event_to_groups-in-perf_group_detach.patch
  (git fixes, bsc#1210986, CVE-2023-2235).
- commit c5399e7</changelog>
  <changelog author="vbabka@suse.cz" date="1683028805">- mm: take a page reference when removing device exclusive entries
  (bsc#1211025).
- commit fd0cc4f</changelog>
</package>
<package pkgid="d1c515f238d3068afbc24506d585b2b9fb86d3a6c16e70e0c49f807cc1eeb472" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.63.1"/>
  <changelog author="dwagner@suse.de" date="1682596800">- nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -&gt; {HARDIRQ-ON-W}
  usage" (git-fixes).
- nvme: fix async event trace event (git-fixes).
- nvmet: fix I/O Command Set specific Identify Controller
  (git-fixes).
- nvmet: fix Identify Active Namespace ID list handling
  (git-fixes).
- nvmet: fix Identify Controller handling (git-fixes).
- nvmet: fix Identify Namespace handling (git-fixes).
- commit da5f4d4</changelog>
  <changelog author="jack@suse.cz" date="1682596801">- ext4: use ext4_journal_start/stop for fast commit transactions
  (bsc#1210793).
  Refresh patches.suse/ext4-fast-commit-may-not-fallback-for-ineligible-com.patch
  patches.suse/ext4-fix-fallocate-to-use-file_modified-to-update-pe.patch
  patches.suse/ext4-fix-race-condition-between-ext4_write-and-ext4_.patch
- commit b470a11</changelog>
  <changelog author="dwagner@suse.de" date="1682596802">- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
- commit da2e21e</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1682596803">- Update
  patches.suse/net-mlx5-DR-Fix-NULL-vs-IS_ERR-checking-in-dr_domain.patch
  (jsc#SLE-19253 bsc#1208845 CVE-2023-23006).
  Added CVE reference.
- commit 53f1f7b</changelog>
  <changelog author="dwagner@suse.de" date="1682596804">- blacklist.conf: add nvme git-fixes
- commit be17720</changelog>
  <changelog author="dwagner@suse.de" date="1682683200">- kabi/severities: ignore KABI for NVMe target (bsc#1174777)
  The target code is only for testing and there are no external users.
- commit a8c10fa</changelog>
  <changelog author="tiwai@suse.de" date="1682683201">- virtio_ring: don't update event idx on get_buf (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  (git-fixes).
- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property
  (git-fixes).
- vmci_host: fix a race condition in vmci_host_poll() causing GPF
  (git-fixes).
- fpga: bridge: fix kernel-doc parameter description (git-fixes).
- driver core: Don't require dynamic_debug for initcall_debug
  probe timing (git-fixes).
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
  (git-fixes).
- staging: iio: resolver: ads1210: fix config mode (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  rtw_scan_timeout_handler() (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  _rtw_join_timeout_handler() (git-fixes).
- serial: 8250: Add missing wakeup event reporting (git-fixes).
- tty: serial: fsl_lpuart: adjust buffer length to the intended
  size (git-fixes).
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  (git-fixes).
- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
- xhci: fix debugfs register accesses while suspended (git-fixes).
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix use after free bug in
  renesas_usb3_remove due to race condition (git-fixes).
- usb: dwc3: gadget: Change condition for processing suspend event
  (git-fixes).
- usb: host: xhci-rcar: remove leftover quirk handling
  (git-fixes).
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on
  error path (git-fixes).
- ipmi: fix SSIF not responding under certain cond (git-fixes).
- ipmi:ssif: Add send_retries increment (git-fixes).
- spi: cadence-quadspi: fix suspend-resume implementations
  (git-fixes).
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
- spi: qup: Don't skip cleanup in remove's error path (git-fixes).
- ASoC: fsl_mqs: move of_node_put() to the correct location
  (git-fixes).
- ASoC: es8316: Handle optional IRQ assignment (git-fixes).
- ASoC: cs35l41: Only disable internal boost (git-fixes).
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config
  (git-fixes).
- PCI: imx6: Install the fault handler only on compatible match
  (git-fixes).
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and
  device_lock (git-fixes).
- PCI/EDR: Clear Device Status after EDR error recovery
  (git-fixes).
- drm/panel: otm8009a: Set backlight parent to panel device
  (git-fixes).
- commit 30ae662</changelog>
  <changelog author="petr.pavlu@suse.com" date="1682683202">- keys: Fix linking a duplicate key to a keyring's assoc_array
  (bsc#1207088).
- commit 52b6749</changelog>
  <changelog author="ykaukab@suse.de" date="1682683203">- ACPI: CPPC: Disable FIE if registers in PCC regions
  (bsc#1210953).
- cpufreq: CPPC: Fix build error without
  CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
- commit 5d50d5f</changelog>
  <changelog author="dwagner@suse.de" date="1682683204">- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
- scsi: lpfc: Silence an incorrect device output (bsc#1210943).
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  (bsc#1210943).
- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting()
  (bsc#1210943).
- scsi: lpfc: Copyright updates for 14.2.0.11 patches
  (bsc#1210943).
- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation
  logic (bsc#1210943).
- scsi: lpfc: Skip waiting for register ready bits when in
  unrecoverable state (bsc#1210943).
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with
  no recovery (bsc#1210943).
- scsi: lpfc: Defer issuing new PLOGI if received RSCN before
  completing REG_LOGIN (bsc#1210943).
- scsi: lpfc: Record LOGO state with discovery engine even if
  aborted (bsc#1210943).
- scsi: lpfc: Fix lockdep warning for rx_monitor lock when
  unloading driver (bsc#1210943).
- scsi: lpfc: Reorder freeing of various DMA buffers and their
  list removal (bsc#1210943).
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer
  overflow (bsc#1210943).
- cpumask: fix incorrect cpumask scanning result checks
  (bsc#1210943).
- scsi: lpfc: Fix double word in comments (bsc#1210943).
- scsi: scsi_transport_fc: Add an additional flag to
  fc_host_fpin_rcv() (bsc#1210943).
- commit 7354766</changelog>
  <changelog author="dwagner@suse.de" date="1682683205">- nvme: send Identify with CNS 06h only to I/O controllers
  (bsc#1209693).
- commit fe51de7</changelog>
  <changelog author="dfaggioli@suse.com" date="1682683206">- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (bsc#1206992
  CVE-2022-2196).
- commit 2cab1a4</changelog>
  <changelog author="neilb@suse.de" date="1682942400">- NFS: Cleanup unused rpc_clnt variable (git-fixes).
- NFSD: callback request does not use correct credential for
  AUTH_SYS (git-fixes).
- sunrpc: only free unix grouplist after RCU settles (git-fixes).
- nfsd: call op_release, even when op_func returns an error
  (git-fixes).
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
  (git-fixes).
- commit aa8b700</changelog>
  <changelog author="tiwai@suse.de" date="1682942401">- power: supply: generic-adc-battery: fix unit scaling
  (git-fixes).
- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if'
  match (git-fixes).
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src
  to reparent (git-fixes).
- clk: add missing of_node_put() in "assigned-clocks" property
  parsing (git-fixes).
- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
- clocksource/drivers/davinci: Fix memory leak in
  davinci_timer_register when init fails (git-fixes).
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
  (git-fixes).
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  (git-fixes).
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
  (git-fixes).
- selftests/kselftest/runner/run_one(): allow running
  non-executable files (git-fixes).
- commit fc18250</changelog>
  <changelog author="tiwai@suse.de" date="1683028800">- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
  (git-fixes).
- Input: hp_sdc_rtc - mark an unused function as __maybe_unused
  (git-fixes).
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current
  time (git-fixes).
- rtc: omap: include header for omap_rtc_power_off_program
  prototype (git-fixes).
- commit 4f6ef5f</changelog>
  <changelog author="mgorman@suse.de" date="1683028801">- locking/rwbase: Mitigate indefinite writer starvation.
  Move out of sorted as the patch has moved within the tip tree.
- commit 0ba915d</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028802">- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
- commit f115e36</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028803">- blacklist.conf: Exclude unrelated kconfig patch
- commit 2595126</changelog>
  <changelog author="mhocko@suse.com" date="1683028804">- Update
  patches.suse/perf-Fix-check-before-add_event_to_groups-in-perf_group_detach.patch
  (git fixes, bsc#1210986, CVE-2023-2235).
- commit c5399e7</changelog>
  <changelog author="vbabka@suse.cz" date="1683028805">- mm: take a page reference when removing device exclusive entries
  (bsc#1211025).
- commit fd0cc4f</changelog>
</package>
<package pkgid="c049712128df783d5ae08e1e3246cf28d033c7b51d800e0709d52885f92f6d9a" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.63.1"/>
  <changelog author="dwagner@suse.de" date="1682596800">- nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -&gt; {HARDIRQ-ON-W}
  usage" (git-fixes).
- nvme: fix async event trace event (git-fixes).
- nvmet: fix I/O Command Set specific Identify Controller
  (git-fixes).
- nvmet: fix Identify Active Namespace ID list handling
  (git-fixes).
- nvmet: fix Identify Controller handling (git-fixes).
- nvmet: fix Identify Namespace handling (git-fixes).
- commit da5f4d4</changelog>
  <changelog author="jack@suse.cz" date="1682596801">- ext4: use ext4_journal_start/stop for fast commit transactions
  (bsc#1210793).
  Refresh patches.suse/ext4-fast-commit-may-not-fallback-for-ineligible-com.patch
  patches.suse/ext4-fix-fallocate-to-use-file_modified-to-update-pe.patch
  patches.suse/ext4-fix-race-condition-between-ext4_write-and-ext4_.patch
- commit b470a11</changelog>
  <changelog author="dwagner@suse.de" date="1682596802">- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
- commit da2e21e</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1682596803">- Update
  patches.suse/net-mlx5-DR-Fix-NULL-vs-IS_ERR-checking-in-dr_domain.patch
  (jsc#SLE-19253 bsc#1208845 CVE-2023-23006).
  Added CVE reference.
- commit 53f1f7b</changelog>
  <changelog author="dwagner@suse.de" date="1682596804">- blacklist.conf: add nvme git-fixes
- commit be17720</changelog>
  <changelog author="dwagner@suse.de" date="1682683200">- kabi/severities: ignore KABI for NVMe target (bsc#1174777)
  The target code is only for testing and there are no external users.
- commit a8c10fa</changelog>
  <changelog author="tiwai@suse.de" date="1682683201">- virtio_ring: don't update event idx on get_buf (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  (git-fixes).
- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property
  (git-fixes).
- vmci_host: fix a race condition in vmci_host_poll() causing GPF
  (git-fixes).
- fpga: bridge: fix kernel-doc parameter description (git-fixes).
- driver core: Don't require dynamic_debug for initcall_debug
  probe timing (git-fixes).
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
  (git-fixes).
- staging: iio: resolver: ads1210: fix config mode (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  rtw_scan_timeout_handler() (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  _rtw_join_timeout_handler() (git-fixes).
- serial: 8250: Add missing wakeup event reporting (git-fixes).
- tty: serial: fsl_lpuart: adjust buffer length to the intended
  size (git-fixes).
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  (git-fixes).
- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
- xhci: fix debugfs register accesses while suspended (git-fixes).
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix use after free bug in
  renesas_usb3_remove due to race condition (git-fixes).
- usb: dwc3: gadget: Change condition for processing suspend event
  (git-fixes).
- usb: host: xhci-rcar: remove leftover quirk handling
  (git-fixes).
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on
  error path (git-fixes).
- ipmi: fix SSIF not responding under certain cond (git-fixes).
- ipmi:ssif: Add send_retries increment (git-fixes).
- spi: cadence-quadspi: fix suspend-resume implementations
  (git-fixes).
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
- spi: qup: Don't skip cleanup in remove's error path (git-fixes).
- ASoC: fsl_mqs: move of_node_put() to the correct location
  (git-fixes).
- ASoC: es8316: Handle optional IRQ assignment (git-fixes).
- ASoC: cs35l41: Only disable internal boost (git-fixes).
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config
  (git-fixes).
- PCI: imx6: Install the fault handler only on compatible match
  (git-fixes).
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and
  device_lock (git-fixes).
- PCI/EDR: Clear Device Status after EDR error recovery
  (git-fixes).
- drm/panel: otm8009a: Set backlight parent to panel device
  (git-fixes).
- commit 30ae662</changelog>
  <changelog author="petr.pavlu@suse.com" date="1682683202">- keys: Fix linking a duplicate key to a keyring's assoc_array
  (bsc#1207088).
- commit 52b6749</changelog>
  <changelog author="ykaukab@suse.de" date="1682683203">- ACPI: CPPC: Disable FIE if registers in PCC regions
  (bsc#1210953).
- cpufreq: CPPC: Fix build error without
  CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
- commit 5d50d5f</changelog>
  <changelog author="dwagner@suse.de" date="1682683204">- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
- scsi: lpfc: Silence an incorrect device output (bsc#1210943).
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  (bsc#1210943).
- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting()
  (bsc#1210943).
- scsi: lpfc: Copyright updates for 14.2.0.11 patches
  (bsc#1210943).
- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation
  logic (bsc#1210943).
- scsi: lpfc: Skip waiting for register ready bits when in
  unrecoverable state (bsc#1210943).
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with
  no recovery (bsc#1210943).
- scsi: lpfc: Defer issuing new PLOGI if received RSCN before
  completing REG_LOGIN (bsc#1210943).
- scsi: lpfc: Record LOGO state with discovery engine even if
  aborted (bsc#1210943).
- scsi: lpfc: Fix lockdep warning for rx_monitor lock when
  unloading driver (bsc#1210943).
- scsi: lpfc: Reorder freeing of various DMA buffers and their
  list removal (bsc#1210943).
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer
  overflow (bsc#1210943).
- cpumask: fix incorrect cpumask scanning result checks
  (bsc#1210943).
- scsi: lpfc: Fix double word in comments (bsc#1210943).
- scsi: scsi_transport_fc: Add an additional flag to
  fc_host_fpin_rcv() (bsc#1210943).
- commit 7354766</changelog>
  <changelog author="dwagner@suse.de" date="1682683205">- nvme: send Identify with CNS 06h only to I/O controllers
  (bsc#1209693).
- commit fe51de7</changelog>
  <changelog author="dfaggioli@suse.com" date="1682683206">- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (bsc#1206992
  CVE-2022-2196).
- commit 2cab1a4</changelog>
  <changelog author="neilb@suse.de" date="1682942400">- NFS: Cleanup unused rpc_clnt variable (git-fixes).
- NFSD: callback request does not use correct credential for
  AUTH_SYS (git-fixes).
- sunrpc: only free unix grouplist after RCU settles (git-fixes).
- nfsd: call op_release, even when op_func returns an error
  (git-fixes).
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
  (git-fixes).
- commit aa8b700</changelog>
  <changelog author="tiwai@suse.de" date="1682942401">- power: supply: generic-adc-battery: fix unit scaling
  (git-fixes).
- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if'
  match (git-fixes).
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src
  to reparent (git-fixes).
- clk: add missing of_node_put() in "assigned-clocks" property
  parsing (git-fixes).
- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
- clocksource/drivers/davinci: Fix memory leak in
  davinci_timer_register when init fails (git-fixes).
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
  (git-fixes).
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  (git-fixes).
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
  (git-fixes).
- selftests/kselftest/runner/run_one(): allow running
  non-executable files (git-fixes).
- commit fc18250</changelog>
  <changelog author="tiwai@suse.de" date="1683028800">- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
  (git-fixes).
- Input: hp_sdc_rtc - mark an unused function as __maybe_unused
  (git-fixes).
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current
  time (git-fixes).
- rtc: omap: include header for omap_rtc_power_off_program
  prototype (git-fixes).
- commit 4f6ef5f</changelog>
  <changelog author="mgorman@suse.de" date="1683028801">- locking/rwbase: Mitigate indefinite writer starvation.
  Move out of sorted as the patch has moved within the tip tree.
- commit 0ba915d</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028802">- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
- commit f115e36</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028803">- blacklist.conf: Exclude unrelated kconfig patch
- commit 2595126</changelog>
  <changelog author="mhocko@suse.com" date="1683028804">- Update
  patches.suse/perf-Fix-check-before-add_event_to_groups-in-perf_group_detach.patch
  (git fixes, bsc#1210986, CVE-2023-2235).
- commit c5399e7</changelog>
  <changelog author="vbabka@suse.cz" date="1683028805">- mm: take a page reference when removing device exclusive entries
  (bsc#1211025).
- commit fd0cc4f</changelog>
</package>
<package pkgid="be1835171e90ed66d76053b8881dec66de52d6ac7ad38b58058825c7743d29bc" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.66.1"/>
  <changelog author="nik.borisov@suse.com" date="1685966400">- x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes).
- commit 3cd00dd</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966401">- x86/tsx: Add a feature bit for TSX control MSR support (git-fixes).
- commit b67ebd4</changelog>
  <changelog author="tiwai@suse.de" date="1685966402">- Update patch-mainline metadata for a lockdown patch
- commit ff4a857</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966403">- x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes).
- commit 89bdacb</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966404">- x86/resctrl: Fix min_cbm_bits for AMD (git-fixes).
- commit f0be05e</changelog>
  <changelog author="dwagner@suse.de" date="1685966405">- blacklist: add nvme bogus nsid check
  We don't not need these quirks as we don't ship the check.
- commit bbebeaf</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1685966406">- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
  pressure (bsc#1211564).
- commit 8e0fc37</changelog>
  <changelog author="tiwai@suse.de" date="1685966407">- thunderbolt: Mask ring interrupt on Intel hardware as well
  (bsc#1210165).
- commit 4a76dd6</changelog>
  <changelog author="mkubecek@suse.cz" date="1685966408">- net: rpl: fix rpl header size calculation (CVE-2023-2156
  bsc#1211131).
- commit c308d83</changelog>
  <changelog author="tiwai@suse.de" date="1685966409">- misc: fastrpc: reject new invocations during device removal
  (git-fixes).
- misc: fastrpc: return -EPIPE to invocations on device removal
  (git-fixes).
- iio: imu: inv_icm42600: fix timestamp reset (git-fixes).
- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
  IRQ_DISABLE_UNLAZY flag (git-fixes).
- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
  compatible value (git-fixes).
- iio: dac: mcp4725: Fix i2c_master_send() return value handling
  (git-fixes).
- iio: light: vcnl4035: fixed chip ID check (git-fixes).
- iio: adc: ad7192: Change "shorted" channels to differential
  (git-fixes).
- iio: accel: st_accel: Fix invalid mount_matrix on devices
  without ACPI _ONT method (git-fixes).
- iio: adc: mxs-lradc: fix the order of two cleanup operations
  (git-fixes).
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
  instead of UARTCTRL_SBK (git-fixes).
- serial: 8250_tegra: Fix an error handling path in
  tegra_uart_probe() (git-fixes).
- usb: usbfs: Use consistent mmap functions (git-fixes).
- usb: usbfs: Enforce page requirements for mmap (git-fixes).
- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
  (git-fixes).
- usb: gadget: f_fs: Add unbind event before functionfs_unbind
  (git-fixes).
- mmc: vub300: fix invalid response handling (git-fixes).
- selinux: don't use make's grouped targets feature yet
  (git-fixes).
- mtd: rawnand: marvell: don't set the NAND frequency select
  (git-fixes).
- mtd: rawnand: marvell: ensure timing values are written
  (git-fixes).
- mtd: rawnand: ingenic: fix empty stub helper definitions
  (git-fixes).
- selftests: mptcp: sockopt: skip if MPTCP is not supported
  (git-fixes).
- selftests: mptcp: pm nl: skip if MPTCP is not supported
  (git-fixes).
- selftests: mptcp: connect: skip if MPTCP is not supported
  (git-fixes).
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
  (git-fixes).
- HID: wacom: avoid integer overflow in wacom_intuos_inout()
  (git-fixes).
- ata: libata-scsi: Use correct device no in ata_find_dev()
  (git-fixes).
- firmware: arm_ffa: Set reserved/MBZ fields to zero in the
  memory descriptors (git-fixes).
- firmware: arm_ffa: Check if ffa_driver remove is present before
  executing (git-fixes).
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
  (git-fixes).
- gpio: mockup: Fix mode of debugfs files (git-fixes).
- drm/sched: Remove redundant check (git-fixes).
- 3c589_cs: Fix an error handling path in tc589_probe()
  (git-fixes).
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg
  (git-fixes).
- power: supply: bq27xxx: After charger plug in/out wait 0.5s
  for things to stabilize (git-fixes).
- power: supply: bq27xxx: Add cache parameter to
  bq27xxx_battery_current_and_status() (git-fixes).
- power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes).
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race
  condition (git-fixes).
- power: supply: leds: Fix blink to LED on transition (git-fixes).
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes).
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
  (git-fixes).
- ASoC: lpass: Fix for KASAN use_after_free out of bounds
  (git-fixes).
- ALSA: hda: Fix unhandled register update during auto-suspend
  period (git-fixes).
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes).
- dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries
  (git-fixes).
- net: mdio: mvusb: Fix an error handling path in
  mvusb_mdio_probe() (git-fixes).
- watchdog: sp5100_tco: Immediately trigger upon starting
  (git-fixes).
- dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes).
- commit 2ec09cc</changelog>
  <changelog author="tiwai@suse.de" date="1685966410">- ASoC: rt5682: Disable jack detection interrupt during suspend
  (git-fixes).
- Refresh patches.kabi/snd-soc-rt5682-kABI-workaround.patch.
- commit ce0cf1d</changelog>
  <changelog author="tiwai@suse.de" date="1686052800">- KEYS: asymmetric: Copy sig and digest in
  public_key_verify_signature() (git-fixes).
- power: supply: bq27xxx: Ensure power_supply_changed() is called
  on current sign changes (git-fixes).
- power: supply: bq27xxx: Move bq27xxx_battery_update() down
  (git-fixes).
- power: supply: bq27xxx: Fix poll_interval handling and races
  on remove (git-fixes).
- bluetooth: Add cmd validity checks at the start of
  hci_sock_ioctl() (git-fixes).
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if
  not set (git-fixes).
- commit 31ed077</changelog>
  <changelog author="tiwai@suse.de" date="1686052801">- power: supply: bq27xxx: expose battery data when CI=1
  (git-fixes).
- Refresh
  patches.suse/power-supply-bq27xxx-Fix-bq27xxx_battery_update-race.patch.
- commit 3c4cf6c</changelog>
  <changelog author="dwagner@suse.de" date="1686052802">- nvme: fix passthrough csi check (git-fixes).
- nvme: move the Samsung X5 quirk entry to the core quirks
  (git-fixes).
- commit d03fbdf</changelog>
  <changelog author="tiwai@suse.de" date="1686052803">- kABI workaround for btbcm.c (git-fixes).
- commit ab2692b</changelog>
  <changelog author="tiwai@suse.de" date="1686052804">- kabi/severities: ignore kABI in bq27xxx_battery module
  Those are local symbols that are used only by child drivers
- commit 8d7e23d</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052805">- x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
- commit 4309e22</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052806">- x86/topology: Fix multiple packages shown on a single-package system (git-fixes).
- commit 70a1ce4</changelog>
  <changelog author="tzimmermann@suse.com" date="1686052807">- Update "drm/i915/gem: add missing boundary check in vm_access" (bsc#1211263 CVE-2023-28410)
  Add bug and CVE number to the References tag.
- commit f799efb</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052808">- x86/topology: Fix duplicated core ID within a package (git-fixes).
- commit 98adc02</changelog>
</package>
<package pkgid="c3883757b356d716645dc85ec054eecd82f5e8fea80aa51f7d3cb8a21b156f2b" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.66.1"/>
  <changelog author="nik.borisov@suse.com" date="1685966400">- x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes).
- commit 3cd00dd</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966401">- x86/tsx: Add a feature bit for TSX control MSR support (git-fixes).
- commit b67ebd4</changelog>
  <changelog author="tiwai@suse.de" date="1685966402">- Update patch-mainline metadata for a lockdown patch
- commit ff4a857</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966403">- x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes).
- commit 89bdacb</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966404">- x86/resctrl: Fix min_cbm_bits for AMD (git-fixes).
- commit f0be05e</changelog>
  <changelog author="dwagner@suse.de" date="1685966405">- blacklist: add nvme bogus nsid check
  We don't not need these quirks as we don't ship the check.
- commit bbebeaf</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1685966406">- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
  pressure (bsc#1211564).
- commit 8e0fc37</changelog>
  <changelog author="tiwai@suse.de" date="1685966407">- thunderbolt: Mask ring interrupt on Intel hardware as well
  (bsc#1210165).
- commit 4a76dd6</changelog>
  <changelog author="mkubecek@suse.cz" date="1685966408">- net: rpl: fix rpl header size calculation (CVE-2023-2156
  bsc#1211131).
- commit c308d83</changelog>
  <changelog author="tiwai@suse.de" date="1685966409">- misc: fastrpc: reject new invocations during device removal
  (git-fixes).
- misc: fastrpc: return -EPIPE to invocations on device removal
  (git-fixes).
- iio: imu: inv_icm42600: fix timestamp reset (git-fixes).
- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
  IRQ_DISABLE_UNLAZY flag (git-fixes).
- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
  compatible value (git-fixes).
- iio: dac: mcp4725: Fix i2c_master_send() return value handling
  (git-fixes).
- iio: light: vcnl4035: fixed chip ID check (git-fixes).
- iio: adc: ad7192: Change "shorted" channels to differential
  (git-fixes).
- iio: accel: st_accel: Fix invalid mount_matrix on devices
  without ACPI _ONT method (git-fixes).
- iio: adc: mxs-lradc: fix the order of two cleanup operations
  (git-fixes).
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
  instead of UARTCTRL_SBK (git-fixes).
- serial: 8250_tegra: Fix an error handling path in
  tegra_uart_probe() (git-fixes).
- usb: usbfs: Use consistent mmap functions (git-fixes).
- usb: usbfs: Enforce page requirements for mmap (git-fixes).
- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
  (git-fixes).
- usb: gadget: f_fs: Add unbind event before functionfs_unbind
  (git-fixes).
- mmc: vub300: fix invalid response handling (git-fixes).
- selinux: don't use make's grouped targets feature yet
  (git-fixes).
- mtd: rawnand: marvell: don't set the NAND frequency select
  (git-fixes).
- mtd: rawnand: marvell: ensure timing values are written
  (git-fixes).
- mtd: rawnand: ingenic: fix empty stub helper definitions
  (git-fixes).
- selftests: mptcp: sockopt: skip if MPTCP is not supported
  (git-fixes).
- selftests: mptcp: pm nl: skip if MPTCP is not supported
  (git-fixes).
- selftests: mptcp: connect: skip if MPTCP is not supported
  (git-fixes).
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
  (git-fixes).
- HID: wacom: avoid integer overflow in wacom_intuos_inout()
  (git-fixes).
- ata: libata-scsi: Use correct device no in ata_find_dev()
  (git-fixes).
- firmware: arm_ffa: Set reserved/MBZ fields to zero in the
  memory descriptors (git-fixes).
- firmware: arm_ffa: Check if ffa_driver remove is present before
  executing (git-fixes).
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
  (git-fixes).
- gpio: mockup: Fix mode of debugfs files (git-fixes).
- drm/sched: Remove redundant check (git-fixes).
- 3c589_cs: Fix an error handling path in tc589_probe()
  (git-fixes).
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg
  (git-fixes).
- power: supply: bq27xxx: After charger plug in/out wait 0.5s
  for things to stabilize (git-fixes).
- power: supply: bq27xxx: Add cache parameter to
  bq27xxx_battery_current_and_status() (git-fixes).
- power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes).
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race
  condition (git-fixes).
- power: supply: leds: Fix blink to LED on transition (git-fixes).
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes).
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
  (git-fixes).
- ASoC: lpass: Fix for KASAN use_after_free out of bounds
  (git-fixes).
- ALSA: hda: Fix unhandled register update during auto-suspend
  period (git-fixes).
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes).
- dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries
  (git-fixes).
- net: mdio: mvusb: Fix an error handling path in
  mvusb_mdio_probe() (git-fixes).
- watchdog: sp5100_tco: Immediately trigger upon starting
  (git-fixes).
- dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes).
- commit 2ec09cc</changelog>
  <changelog author="tiwai@suse.de" date="1685966410">- ASoC: rt5682: Disable jack detection interrupt during suspend
  (git-fixes).
- Refresh patches.kabi/snd-soc-rt5682-kABI-workaround.patch.
- commit ce0cf1d</changelog>
  <changelog author="tiwai@suse.de" date="1686052800">- KEYS: asymmetric: Copy sig and digest in
  public_key_verify_signature() (git-fixes).
- power: supply: bq27xxx: Ensure power_supply_changed() is called
  on current sign changes (git-fixes).
- power: supply: bq27xxx: Move bq27xxx_battery_update() down
  (git-fixes).
- power: supply: bq27xxx: Fix poll_interval handling and races
  on remove (git-fixes).
- bluetooth: Add cmd validity checks at the start of
  hci_sock_ioctl() (git-fixes).
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if
  not set (git-fixes).
- commit 31ed077</changelog>
  <changelog author="tiwai@suse.de" date="1686052801">- power: supply: bq27xxx: expose battery data when CI=1
  (git-fixes).
- Refresh
  patches.suse/power-supply-bq27xxx-Fix-bq27xxx_battery_update-race.patch.
- commit 3c4cf6c</changelog>
  <changelog author="dwagner@suse.de" date="1686052802">- nvme: fix passthrough csi check (git-fixes).
- nvme: move the Samsung X5 quirk entry to the core quirks
  (git-fixes).
- commit d03fbdf</changelog>
  <changelog author="tiwai@suse.de" date="1686052803">- kABI workaround for btbcm.c (git-fixes).
- commit ab2692b</changelog>
  <changelog author="tiwai@suse.de" date="1686052804">- kabi/severities: ignore kABI in bq27xxx_battery module
  Those are local symbols that are used only by child drivers
- commit 8d7e23d</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052805">- x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
- commit 4309e22</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052806">- x86/topology: Fix multiple packages shown on a single-package system (git-fixes).
- commit 70a1ce4</changelog>
  <changelog author="tzimmermann@suse.com" date="1686052807">- Update "drm/i915/gem: add missing boundary check in vm_access" (bsc#1211263 CVE-2023-28410)
  Add bug and CVE number to the References tag.
- commit f799efb</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052808">- x86/topology: Fix duplicated core ID within a package (git-fixes).
- commit 98adc02</changelog>
</package>
<package pkgid="2b4630d57853a997c30824643d90d2be0dbb07d81ea7deb642c6ed46cf360a77" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.66.1"/>
  <changelog author="nik.borisov@suse.com" date="1685966400">- x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes).
- commit 3cd00dd</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966401">- x86/tsx: Add a feature bit for TSX control MSR support (git-fixes).
- commit b67ebd4</changelog>
  <changelog author="tiwai@suse.de" date="1685966402">- Update patch-mainline metadata for a lockdown patch
- commit ff4a857</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966403">- x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes).
- commit 89bdacb</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966404">- x86/resctrl: Fix min_cbm_bits for AMD (git-fixes).
- commit f0be05e</changelog>
  <changelog author="dwagner@suse.de" date="1685966405">- blacklist: add nvme bogus nsid check
  We don't not need these quirks as we don't ship the check.
- commit bbebeaf</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1685966406">- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
  pressure (bsc#1211564).
- commit 8e0fc37</changelog>
  <changelog author="tiwai@suse.de" date="1685966407">- thunderbolt: Mask ring interrupt on Intel hardware as well
  (bsc#1210165).
- commit 4a76dd6</changelog>
  <changelog author="mkubecek@suse.cz" date="1685966408">- net: rpl: fix rpl header size calculation (CVE-2023-2156
  bsc#1211131).
- commit c308d83</changelog>
  <changelog author="tiwai@suse.de" date="1685966409">- misc: fastrpc: reject new invocations during device removal
  (git-fixes).
- misc: fastrpc: return -EPIPE to invocations on device removal
  (git-fixes).
- iio: imu: inv_icm42600: fix timestamp reset (git-fixes).
- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
  IRQ_DISABLE_UNLAZY flag (git-fixes).
- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
  compatible value (git-fixes).
- iio: dac: mcp4725: Fix i2c_master_send() return value handling
  (git-fixes).
- iio: light: vcnl4035: fixed chip ID check (git-fixes).
- iio: adc: ad7192: Change "shorted" channels to differential
  (git-fixes).
- iio: accel: st_accel: Fix invalid mount_matrix on devices
  without ACPI _ONT method (git-fixes).
- iio: adc: mxs-lradc: fix the order of two cleanup operations
  (git-fixes).
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
  instead of UARTCTRL_SBK (git-fixes).
- serial: 8250_tegra: Fix an error handling path in
  tegra_uart_probe() (git-fixes).
- usb: usbfs: Use consistent mmap functions (git-fixes).
- usb: usbfs: Enforce page requirements for mmap (git-fixes).
- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
  (git-fixes).
- usb: gadget: f_fs: Add unbind event before functionfs_unbind
  (git-fixes).
- mmc: vub300: fix invalid response handling (git-fixes).
- selinux: don't use make's grouped targets feature yet
  (git-fixes).
- mtd: rawnand: marvell: don't set the NAND frequency select
  (git-fixes).
- mtd: rawnand: marvell: ensure timing values are written
  (git-fixes).
- mtd: rawnand: ingenic: fix empty stub helper definitions
  (git-fixes).
- selftests: mptcp: sockopt: skip if MPTCP is not supported
  (git-fixes).
- selftests: mptcp: pm nl: skip if MPTCP is not supported
  (git-fixes).
- selftests: mptcp: connect: skip if MPTCP is not supported
  (git-fixes).
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
  (git-fixes).
- HID: wacom: avoid integer overflow in wacom_intuos_inout()
  (git-fixes).
- ata: libata-scsi: Use correct device no in ata_find_dev()
  (git-fixes).
- firmware: arm_ffa: Set reserved/MBZ fields to zero in the
  memory descriptors (git-fixes).
- firmware: arm_ffa: Check if ffa_driver remove is present before
  executing (git-fixes).
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
  (git-fixes).
- gpio: mockup: Fix mode of debugfs files (git-fixes).
- drm/sched: Remove redundant check (git-fixes).
- 3c589_cs: Fix an error handling path in tc589_probe()
  (git-fixes).
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg
  (git-fixes).
- power: supply: bq27xxx: After charger plug in/out wait 0.5s
  for things to stabilize (git-fixes).
- power: supply: bq27xxx: Add cache parameter to
  bq27xxx_battery_current_and_status() (git-fixes).
- power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes).
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race
  condition (git-fixes).
- power: supply: leds: Fix blink to LED on transition (git-fixes).
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes).
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
  (git-fixes).
- ASoC: lpass: Fix for KASAN use_after_free out of bounds
  (git-fixes).
- ALSA: hda: Fix unhandled register update during auto-suspend
  period (git-fixes).
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes).
- dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries
  (git-fixes).
- net: mdio: mvusb: Fix an error handling path in
  mvusb_mdio_probe() (git-fixes).
- watchdog: sp5100_tco: Immediately trigger upon starting
  (git-fixes).
- dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes).
- commit 2ec09cc</changelog>
  <changelog author="tiwai@suse.de" date="1685966410">- ASoC: rt5682: Disable jack detection interrupt during suspend
  (git-fixes).
- Refresh patches.kabi/snd-soc-rt5682-kABI-workaround.patch.
- commit ce0cf1d</changelog>
  <changelog author="tiwai@suse.de" date="1686052800">- KEYS: asymmetric: Copy sig and digest in
  public_key_verify_signature() (git-fixes).
- power: supply: bq27xxx: Ensure power_supply_changed() is called
  on current sign changes (git-fixes).
- power: supply: bq27xxx: Move bq27xxx_battery_update() down
  (git-fixes).
- power: supply: bq27xxx: Fix poll_interval handling and races
  on remove (git-fixes).
- bluetooth: Add cmd validity checks at the start of
  hci_sock_ioctl() (git-fixes).
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if
  not set (git-fixes).
- commit 31ed077</changelog>
  <changelog author="tiwai@suse.de" date="1686052801">- power: supply: bq27xxx: expose battery data when CI=1
  (git-fixes).
- Refresh
  patches.suse/power-supply-bq27xxx-Fix-bq27xxx_battery_update-race.patch.
- commit 3c4cf6c</changelog>
  <changelog author="dwagner@suse.de" date="1686052802">- nvme: fix passthrough csi check (git-fixes).
- nvme: move the Samsung X5 quirk entry to the core quirks
  (git-fixes).
- commit d03fbdf</changelog>
  <changelog author="tiwai@suse.de" date="1686052803">- kABI workaround for btbcm.c (git-fixes).
- commit ab2692b</changelog>
  <changelog author="tiwai@suse.de" date="1686052804">- kabi/severities: ignore kABI in bq27xxx_battery module
  Those are local symbols that are used only by child drivers
- commit 8d7e23d</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052805">- x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
- commit 4309e22</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052806">- x86/topology: Fix multiple packages shown on a single-package system (git-fixes).
- commit 70a1ce4</changelog>
  <changelog author="tzimmermann@suse.com" date="1686052807">- Update "drm/i915/gem: add missing boundary check in vm_access" (bsc#1211263 CVE-2023-28410)
  Add bug and CVE number to the References tag.
- commit f799efb</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052808">- x86/topology: Fix duplicated core ID within a package (git-fixes).
- commit 98adc02</changelog>
</package>
<package pkgid="1b7d1fd17e8d83cb207aac6782eb790a787c8ca973e3491294636fa0bf1f7e89" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.66.1"/>
  <changelog author="nik.borisov@suse.com" date="1685966400">- x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes).
- commit 3cd00dd</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966401">- x86/tsx: Add a feature bit for TSX control MSR support (git-fixes).
- commit b67ebd4</changelog>
  <changelog author="tiwai@suse.de" date="1685966402">- Update patch-mainline metadata for a lockdown patch
- commit ff4a857</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966403">- x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes).
- commit 89bdacb</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966404">- x86/resctrl: Fix min_cbm_bits for AMD (git-fixes).
- commit f0be05e</changelog>
  <changelog author="dwagner@suse.de" date="1685966405">- blacklist: add nvme bogus nsid check
  We don't not need these quirks as we don't ship the check.
- commit bbebeaf</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1685966406">- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
  pressure (bsc#1211564).
- commit 8e0fc37</changelog>
  <changelog author="tiwai@suse.de" date="1685966407">- thunderbolt: Mask ring interrupt on Intel hardware as well
  (bsc#1210165).
- commit 4a76dd6</changelog>
  <changelog author="mkubecek@suse.cz" date="1685966408">- net: rpl: fix rpl header size calculation (CVE-2023-2156
  bsc#1211131).
- commit c308d83</changelog>
  <changelog author="tiwai@suse.de" date="1685966409">- misc: fastrpc: reject new invocations during device removal
  (git-fixes).
- misc: fastrpc: return -EPIPE to invocations on device removal
  (git-fixes).
- iio: imu: inv_icm42600: fix timestamp reset (git-fixes).
- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
  IRQ_DISABLE_UNLAZY flag (git-fixes).
- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
  compatible value (git-fixes).
- iio: dac: mcp4725: Fix i2c_master_send() return value handling
  (git-fixes).
- iio: light: vcnl4035: fixed chip ID check (git-fixes).
- iio: adc: ad7192: Change "shorted" channels to differential
  (git-fixes).
- iio: accel: st_accel: Fix invalid mount_matrix on devices
  without ACPI _ONT method (git-fixes).
- iio: adc: mxs-lradc: fix the order of two cleanup operations
  (git-fixes).
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
  instead of UARTCTRL_SBK (git-fixes).
- serial: 8250_tegra: Fix an error handling path in
  tegra_uart_probe() (git-fixes).
- usb: usbfs: Use consistent mmap functions (git-fixes).
- usb: usbfs: Enforce page requirements for mmap (git-fixes).
- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
  (git-fixes).
- usb: gadget: f_fs: Add unbind event before functionfs_unbind
  (git-fixes).
- mmc: vub300: fix invalid response handling (git-fixes).
- selinux: don't use make's grouped targets feature yet
  (git-fixes).
- mtd: rawnand: marvell: don't set the NAND frequency select
  (git-fixes).
- mtd: rawnand: marvell: ensure timing values are written
  (git-fixes).
- mtd: rawnand: ingenic: fix empty stub helper definitions
  (git-fixes).
- selftests: mptcp: sockopt: skip if MPTCP is not supported
  (git-fixes).
- selftests: mptcp: pm nl: skip if MPTCP is not supported
  (git-fixes).
- selftests: mptcp: connect: skip if MPTCP is not supported
  (git-fixes).
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
  (git-fixes).
- HID: wacom: avoid integer overflow in wacom_intuos_inout()
  (git-fixes).
- ata: libata-scsi: Use correct device no in ata_find_dev()
  (git-fixes).
- firmware: arm_ffa: Set reserved/MBZ fields to zero in the
  memory descriptors (git-fixes).
- firmware: arm_ffa: Check if ffa_driver remove is present before
  executing (git-fixes).
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
  (git-fixes).
- gpio: mockup: Fix mode of debugfs files (git-fixes).
- drm/sched: Remove redundant check (git-fixes).
- 3c589_cs: Fix an error handling path in tc589_probe()
  (git-fixes).
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg
  (git-fixes).
- power: supply: bq27xxx: After charger plug in/out wait 0.5s
  for things to stabilize (git-fixes).
- power: supply: bq27xxx: Add cache parameter to
  bq27xxx_battery_current_and_status() (git-fixes).
- power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes).
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race
  condition (git-fixes).
- power: supply: leds: Fix blink to LED on transition (git-fixes).
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes).
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
  (git-fixes).
- ASoC: lpass: Fix for KASAN use_after_free out of bounds
  (git-fixes).
- ALSA: hda: Fix unhandled register update during auto-suspend
  period (git-fixes).
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes).
- dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries
  (git-fixes).
- net: mdio: mvusb: Fix an error handling path in
  mvusb_mdio_probe() (git-fixes).
- watchdog: sp5100_tco: Immediately trigger upon starting
  (git-fixes).
- dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes).
- commit 2ec09cc</changelog>
  <changelog author="tiwai@suse.de" date="1685966410">- ASoC: rt5682: Disable jack detection interrupt during suspend
  (git-fixes).
- Refresh patches.kabi/snd-soc-rt5682-kABI-workaround.patch.
- commit ce0cf1d</changelog>
  <changelog author="tiwai@suse.de" date="1686052800">- KEYS: asymmetric: Copy sig and digest in
  public_key_verify_signature() (git-fixes).
- power: supply: bq27xxx: Ensure power_supply_changed() is called
  on current sign changes (git-fixes).
- power: supply: bq27xxx: Move bq27xxx_battery_update() down
  (git-fixes).
- power: supply: bq27xxx: Fix poll_interval handling and races
  on remove (git-fixes).
- bluetooth: Add cmd validity checks at the start of
  hci_sock_ioctl() (git-fixes).
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if
  not set (git-fixes).
- commit 31ed077</changelog>
  <changelog author="tiwai@suse.de" date="1686052801">- power: supply: bq27xxx: expose battery data when CI=1
  (git-fixes).
- Refresh
  patches.suse/power-supply-bq27xxx-Fix-bq27xxx_battery_update-race.patch.
- commit 3c4cf6c</changelog>
  <changelog author="dwagner@suse.de" date="1686052802">- nvme: fix passthrough csi check (git-fixes).
- nvme: move the Samsung X5 quirk entry to the core quirks
  (git-fixes).
- commit d03fbdf</changelog>
  <changelog author="tiwai@suse.de" date="1686052803">- kABI workaround for btbcm.c (git-fixes).
- commit ab2692b</changelog>
  <changelog author="tiwai@suse.de" date="1686052804">- kabi/severities: ignore kABI in bq27xxx_battery module
  Those are local symbols that are used only by child drivers
- commit 8d7e23d</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052805">- x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
- commit 4309e22</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052806">- x86/topology: Fix multiple packages shown on a single-package system (git-fixes).
- commit 70a1ce4</changelog>
  <changelog author="tzimmermann@suse.com" date="1686052807">- Update "drm/i915/gem: add missing boundary check in vm_access" (bsc#1211263 CVE-2023-28410)
  Add bug and CVE number to the References tag.
- commit f799efb</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052808">- x86/topology: Fix duplicated core ID within a package (git-fixes).
- commit 98adc02</changelog>
</package>
<package pkgid="7d1c8090d0b09cff6fac0c68fe309a36ca0cced7df6222971c7ab884fa7fad35" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.69.1"/>
  <changelog author="nmorey@suse.com" date="1688385600">- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
- commit fa23528</changelog>
  <changelog author="nmorey@suse.com" date="1688385601">- RDMA/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
- commit 0f82e06</changelog>
  <changelog author="nmorey@suse.com" date="1688385602">- RDMA/bnxt_re: Use unique names while registering interrupts (git-fixes)
- commit 4d45831</changelog>
  <changelog author="nmorey@suse.com" date="1688385603">- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
- commit 5fd5166</changelog>
  <changelog author="nmorey@suse.com" date="1688385604">- RDMA/bnxt_re: Fix to remove an unnecessary log (git-fixes)
- commit 5b86f20</changelog>
  <changelog author="nmorey@suse.com" date="1688385605">- RDMA/bnxt_re: Return directly without goto jumps (git-fixes)
- commit a16408a</changelog>
  <changelog author="nmorey@suse.com" date="1688385606">- RDMA/bnxt_re: Remove unnecessary checks (git-fixes)
- commit 465a1cc</changelog>
  <changelog author="nmorey@suse.com" date="1688385607">- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
- commit 5d11670</changelog>
  <changelog author="nmorey@suse.com" date="1688385608">- RDMA/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
- commit 9e18a28</changelog>
  <changelog author="nmorey@suse.com" date="1688385609">- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
- commit 030725c</changelog>
  <changelog author="nmorey@suse.com" date="1688385610">- RDMA/hns: Fix hns_roce_table_get return value (git-fixes)
- commit c5a9ac4</changelog>
  <changelog author="nmorey@suse.com" date="1688385611">- RDMA/vmw_pvrdma: Remove unnecessary check on wr-&gt;opcode (git-fixes)
- commit 4a80233</changelog>
  <changelog author="nmorey@suse.com" date="1688385612">- RDMA/bnxt_re: wraparound mbox producer index (git-fixes)
- commit 3193b97</changelog>
  <changelog author="nmorey@suse.com" date="1688385613">- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
- commit 4610493</changelog>
  <changelog author="jgross@suse.com" date="1688385614">- x86/xen: fix secondary processor fpu initialization
  (bsc#1212869).
- commit 8ea47f4</changelog>
  <changelog author="tiwai@suse.de" date="1688385615">- Move upstreamed x86, scsi and arm patches into sorted section
- commit 68279fe</changelog>
  <changelog author="msuchanek@suse.de" date="1688385616">- ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603
  ltc#202604).
- commit 9cf4e75</changelog>
  <changelog author="tiwai@suse.de" date="1688472000">- usb: dwc3: gadget: Propagate core init errors to UDC during
  pullup (git-fixes).
- usb: dwc3-meson-g12a: Fix an error handling path in
  dwc3_meson_g12a_probe() (git-fixes).
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
  (git-fixes).
- usb: dwc3: qcom: Release the correct resources in
  dwc3_qcom_remove() (git-fixes).
- usb: xhci: Remove unused udev from xhci_log_ctx trace event
  (git-fixes).
- usb: hide unused usbfs_notify_suspend/resume functions
  (git-fixes).
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
  (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
  (git-fixes).
- usb: dwc3: qcom: Fix potential memory leak (git-fixes).
- serial: atmel: don't enable IRQs prematurely (git-fixes).
- tty: serial: imx: fix rs485 rx after tx (git-fixes).
- serial: 8250_omap: Use force_suspend and resume for system
  suspend (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() when iterating clk (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() in case of error (git-fixes).
- serial: 8250: lock port for UART_IER access in omap8250_irq()
  (git-fixes).
- serial: 8250: lock port for stop_rx() in omap8250_irq()
  (git-fixes).
- serial: 8250: omap: Fix freeing of resources on failed register
  (git-fixes).
- extcon: Fix kernel doc of property capability fields to avoid
  warnings (git-fixes).
- extcon: Fix kernel doc of property fields to avoid warnings
  (git-fixes).
- misc: fastrpc: Create fastrpc scalar with correct buffer count
  (git-fixes).
- firmware: stratix10-svc: Fix a potential resource leak in
  svc_create_memory_pool() (git-fixes).
- test_firmware: return ENOMEM instead of ENOSPC on failed memory
  allocation (git-fixes).
- meson saradc: fix clock divider mask length (git-fixes).
- iio: accel: fxls8962af: errata bug only applicable for
  FXLS8962AF (git-fixes).
- iio: accel: fxls8962af: fixup buffer scan element type
  (git-fixes).
- iio: adc: ad7192: Fix internal/external clock selection
  (git-fixes).
- iio: adc: ad7192: Fix null ad7192_state pointer access
  (git-fixes).
- w1: fix loop in w1_fini() (git-fixes).
- w1: w1_therm: fix locking behavior in convert_t (git-fixes).
- mfd: stmpe: Only disable the regulators if they are enabled
  (git-fixes).
- mfd: stmfx: Nullify stmfx-&gt;vdd in case of error (git-fixes).
- mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
- mfd: intel-lpss: Add missing check for platform_get_resource
  (git-fixes).
- mfd: pm8008: Fix module autoloading (git-fixes).
- mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
  (git-fixes).
- rtc: st-lpc: Release some resources in st_rtc_probe() in case
  of error (git-fixes).
- extcon: usbc-tusb320: Update state on probe even if no IRQ
  pending (git-fixes).
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a
  port is registered (git-fixes).
- extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
- commit 5d09f51</changelog>
  <changelog author="tiwai@suse.de" date="1688472001">- extcon: usbc-tusb320: Unregister typec port on driver removal
  (git-fixes).
- commit b2eac46</changelog>
  <changelog author="mkoutny@suse.com" date="1688472002">- net/sched: tcindex: Do not use perfect hashing (bsc#1210335
  CVE-2023-1829).
- commit 28b65ec</changelog>
</package>
<package pkgid="00670a697053df46100f66ffac54f8f16e7bbff69a72669969481ee08652cbf7" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.69.1"/>
  <changelog author="nmorey@suse.com" date="1688385600">- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
- commit fa23528</changelog>
  <changelog author="nmorey@suse.com" date="1688385601">- RDMA/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
- commit 0f82e06</changelog>
  <changelog author="nmorey@suse.com" date="1688385602">- RDMA/bnxt_re: Use unique names while registering interrupts (git-fixes)
- commit 4d45831</changelog>
  <changelog author="nmorey@suse.com" date="1688385603">- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
- commit 5fd5166</changelog>
  <changelog author="nmorey@suse.com" date="1688385604">- RDMA/bnxt_re: Fix to remove an unnecessary log (git-fixes)
- commit 5b86f20</changelog>
  <changelog author="nmorey@suse.com" date="1688385605">- RDMA/bnxt_re: Return directly without goto jumps (git-fixes)
- commit a16408a</changelog>
  <changelog author="nmorey@suse.com" date="1688385606">- RDMA/bnxt_re: Remove unnecessary checks (git-fixes)
- commit 465a1cc</changelog>
  <changelog author="nmorey@suse.com" date="1688385607">- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
- commit 5d11670</changelog>
  <changelog author="nmorey@suse.com" date="1688385608">- RDMA/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
- commit 9e18a28</changelog>
  <changelog author="nmorey@suse.com" date="1688385609">- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
- commit 030725c</changelog>
  <changelog author="nmorey@suse.com" date="1688385610">- RDMA/hns: Fix hns_roce_table_get return value (git-fixes)
- commit c5a9ac4</changelog>
  <changelog author="nmorey@suse.com" date="1688385611">- RDMA/vmw_pvrdma: Remove unnecessary check on wr-&gt;opcode (git-fixes)
- commit 4a80233</changelog>
  <changelog author="nmorey@suse.com" date="1688385612">- RDMA/bnxt_re: wraparound mbox producer index (git-fixes)
- commit 3193b97</changelog>
  <changelog author="nmorey@suse.com" date="1688385613">- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
- commit 4610493</changelog>
  <changelog author="jgross@suse.com" date="1688385614">- x86/xen: fix secondary processor fpu initialization
  (bsc#1212869).
- commit 8ea47f4</changelog>
  <changelog author="tiwai@suse.de" date="1688385615">- Move upstreamed x86, scsi and arm patches into sorted section
- commit 68279fe</changelog>
  <changelog author="msuchanek@suse.de" date="1688385616">- ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603
  ltc#202604).
- commit 9cf4e75</changelog>
  <changelog author="tiwai@suse.de" date="1688472000">- usb: dwc3: gadget: Propagate core init errors to UDC during
  pullup (git-fixes).
- usb: dwc3-meson-g12a: Fix an error handling path in
  dwc3_meson_g12a_probe() (git-fixes).
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
  (git-fixes).
- usb: dwc3: qcom: Release the correct resources in
  dwc3_qcom_remove() (git-fixes).
- usb: xhci: Remove unused udev from xhci_log_ctx trace event
  (git-fixes).
- usb: hide unused usbfs_notify_suspend/resume functions
  (git-fixes).
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
  (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
  (git-fixes).
- usb: dwc3: qcom: Fix potential memory leak (git-fixes).
- serial: atmel: don't enable IRQs prematurely (git-fixes).
- tty: serial: imx: fix rs485 rx after tx (git-fixes).
- serial: 8250_omap: Use force_suspend and resume for system
  suspend (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() when iterating clk (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() in case of error (git-fixes).
- serial: 8250: lock port for UART_IER access in omap8250_irq()
  (git-fixes).
- serial: 8250: lock port for stop_rx() in omap8250_irq()
  (git-fixes).
- serial: 8250: omap: Fix freeing of resources on failed register
  (git-fixes).
- extcon: Fix kernel doc of property capability fields to avoid
  warnings (git-fixes).
- extcon: Fix kernel doc of property fields to avoid warnings
  (git-fixes).
- misc: fastrpc: Create fastrpc scalar with correct buffer count
  (git-fixes).
- firmware: stratix10-svc: Fix a potential resource leak in
  svc_create_memory_pool() (git-fixes).
- test_firmware: return ENOMEM instead of ENOSPC on failed memory
  allocation (git-fixes).
- meson saradc: fix clock divider mask length (git-fixes).
- iio: accel: fxls8962af: errata bug only applicable for
  FXLS8962AF (git-fixes).
- iio: accel: fxls8962af: fixup buffer scan element type
  (git-fixes).
- iio: adc: ad7192: Fix internal/external clock selection
  (git-fixes).
- iio: adc: ad7192: Fix null ad7192_state pointer access
  (git-fixes).
- w1: fix loop in w1_fini() (git-fixes).
- w1: w1_therm: fix locking behavior in convert_t (git-fixes).
- mfd: stmpe: Only disable the regulators if they are enabled
  (git-fixes).
- mfd: stmfx: Nullify stmfx-&gt;vdd in case of error (git-fixes).
- mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
- mfd: intel-lpss: Add missing check for platform_get_resource
  (git-fixes).
- mfd: pm8008: Fix module autoloading (git-fixes).
- mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
  (git-fixes).
- rtc: st-lpc: Release some resources in st_rtc_probe() in case
  of error (git-fixes).
- extcon: usbc-tusb320: Update state on probe even if no IRQ
  pending (git-fixes).
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a
  port is registered (git-fixes).
- extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
- commit 5d09f51</changelog>
  <changelog author="tiwai@suse.de" date="1688472001">- extcon: usbc-tusb320: Unregister typec port on driver removal
  (git-fixes).
- commit b2eac46</changelog>
  <changelog author="mkoutny@suse.com" date="1688472002">- net/sched: tcindex: Do not use perfect hashing (bsc#1210335
  CVE-2023-1829).
- commit 28b65ec</changelog>
</package>
<package pkgid="1ce528b72085e13ab1a17e77a9b9d7721d0a51522ca7c2bba47b913c88205e5d" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.69.1"/>
  <changelog author="nmorey@suse.com" date="1688385600">- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
- commit fa23528</changelog>
  <changelog author="nmorey@suse.com" date="1688385601">- RDMA/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
- commit 0f82e06</changelog>
  <changelog author="nmorey@suse.com" date="1688385602">- RDMA/bnxt_re: Use unique names while registering interrupts (git-fixes)
- commit 4d45831</changelog>
  <changelog author="nmorey@suse.com" date="1688385603">- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
- commit 5fd5166</changelog>
  <changelog author="nmorey@suse.com" date="1688385604">- RDMA/bnxt_re: Fix to remove an unnecessary log (git-fixes)
- commit 5b86f20</changelog>
  <changelog author="nmorey@suse.com" date="1688385605">- RDMA/bnxt_re: Return directly without goto jumps (git-fixes)
- commit a16408a</changelog>
  <changelog author="nmorey@suse.com" date="1688385606">- RDMA/bnxt_re: Remove unnecessary checks (git-fixes)
- commit 465a1cc</changelog>
  <changelog author="nmorey@suse.com" date="1688385607">- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
- commit 5d11670</changelog>
  <changelog author="nmorey@suse.com" date="1688385608">- RDMA/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
- commit 9e18a28</changelog>
  <changelog author="nmorey@suse.com" date="1688385609">- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
- commit 030725c</changelog>
  <changelog author="nmorey@suse.com" date="1688385610">- RDMA/hns: Fix hns_roce_table_get return value (git-fixes)
- commit c5a9ac4</changelog>
  <changelog author="nmorey@suse.com" date="1688385611">- RDMA/vmw_pvrdma: Remove unnecessary check on wr-&gt;opcode (git-fixes)
- commit 4a80233</changelog>
  <changelog author="nmorey@suse.com" date="1688385612">- RDMA/bnxt_re: wraparound mbox producer index (git-fixes)
- commit 3193b97</changelog>
  <changelog author="nmorey@suse.com" date="1688385613">- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
- commit 4610493</changelog>
  <changelog author="jgross@suse.com" date="1688385614">- x86/xen: fix secondary processor fpu initialization
  (bsc#1212869).
- commit 8ea47f4</changelog>
  <changelog author="tiwai@suse.de" date="1688385615">- Move upstreamed x86, scsi and arm patches into sorted section
- commit 68279fe</changelog>
  <changelog author="msuchanek@suse.de" date="1688385616">- ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603
  ltc#202604).
- commit 9cf4e75</changelog>
  <changelog author="tiwai@suse.de" date="1688472000">- usb: dwc3: gadget: Propagate core init errors to UDC during
  pullup (git-fixes).
- usb: dwc3-meson-g12a: Fix an error handling path in
  dwc3_meson_g12a_probe() (git-fixes).
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
  (git-fixes).
- usb: dwc3: qcom: Release the correct resources in
  dwc3_qcom_remove() (git-fixes).
- usb: xhci: Remove unused udev from xhci_log_ctx trace event
  (git-fixes).
- usb: hide unused usbfs_notify_suspend/resume functions
  (git-fixes).
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
  (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
  (git-fixes).
- usb: dwc3: qcom: Fix potential memory leak (git-fixes).
- serial: atmel: don't enable IRQs prematurely (git-fixes).
- tty: serial: imx: fix rs485 rx after tx (git-fixes).
- serial: 8250_omap: Use force_suspend and resume for system
  suspend (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() when iterating clk (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() in case of error (git-fixes).
- serial: 8250: lock port for UART_IER access in omap8250_irq()
  (git-fixes).
- serial: 8250: lock port for stop_rx() in omap8250_irq()
  (git-fixes).
- serial: 8250: omap: Fix freeing of resources on failed register
  (git-fixes).
- extcon: Fix kernel doc of property capability fields to avoid
  warnings (git-fixes).
- extcon: Fix kernel doc of property fields to avoid warnings
  (git-fixes).
- misc: fastrpc: Create fastrpc scalar with correct buffer count
  (git-fixes).
- firmware: stratix10-svc: Fix a potential resource leak in
  svc_create_memory_pool() (git-fixes).
- test_firmware: return ENOMEM instead of ENOSPC on failed memory
  allocation (git-fixes).
- meson saradc: fix clock divider mask length (git-fixes).
- iio: accel: fxls8962af: errata bug only applicable for
  FXLS8962AF (git-fixes).
- iio: accel: fxls8962af: fixup buffer scan element type
  (git-fixes).
- iio: adc: ad7192: Fix internal/external clock selection
  (git-fixes).
- iio: adc: ad7192: Fix null ad7192_state pointer access
  (git-fixes).
- w1: fix loop in w1_fini() (git-fixes).
- w1: w1_therm: fix locking behavior in convert_t (git-fixes).
- mfd: stmpe: Only disable the regulators if they are enabled
  (git-fixes).
- mfd: stmfx: Nullify stmfx-&gt;vdd in case of error (git-fixes).
- mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
- mfd: intel-lpss: Add missing check for platform_get_resource
  (git-fixes).
- mfd: pm8008: Fix module autoloading (git-fixes).
- mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
  (git-fixes).
- rtc: st-lpc: Release some resources in st_rtc_probe() in case
  of error (git-fixes).
- extcon: usbc-tusb320: Update state on probe even if no IRQ
  pending (git-fixes).
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a
  port is registered (git-fixes).
- extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
- commit 5d09f51</changelog>
  <changelog author="tiwai@suse.de" date="1688472001">- extcon: usbc-tusb320: Unregister typec port on driver removal
  (git-fixes).
- commit b2eac46</changelog>
  <changelog author="mkoutny@suse.com" date="1688472002">- net/sched: tcindex: Do not use perfect hashing (bsc#1210335
  CVE-2023-1829).
- commit 28b65ec</changelog>
</package>
<package pkgid="9fb6c7ba54c8579b83a479faf5aa6b2eae6192e938bd240e5af1a865c5e157fd" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.69.1"/>
  <changelog author="nmorey@suse.com" date="1688385600">- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
- commit fa23528</changelog>
  <changelog author="nmorey@suse.com" date="1688385601">- RDMA/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
- commit 0f82e06</changelog>
  <changelog author="nmorey@suse.com" date="1688385602">- RDMA/bnxt_re: Use unique names while registering interrupts (git-fixes)
- commit 4d45831</changelog>
  <changelog author="nmorey@suse.com" date="1688385603">- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
- commit 5fd5166</changelog>
  <changelog author="nmorey@suse.com" date="1688385604">- RDMA/bnxt_re: Fix to remove an unnecessary log (git-fixes)
- commit 5b86f20</changelog>
  <changelog author="nmorey@suse.com" date="1688385605">- RDMA/bnxt_re: Return directly without goto jumps (git-fixes)
- commit a16408a</changelog>
  <changelog author="nmorey@suse.com" date="1688385606">- RDMA/bnxt_re: Remove unnecessary checks (git-fixes)
- commit 465a1cc</changelog>
  <changelog author="nmorey@suse.com" date="1688385607">- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
- commit 5d11670</changelog>
  <changelog author="nmorey@suse.com" date="1688385608">- RDMA/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
- commit 9e18a28</changelog>
  <changelog author="nmorey@suse.com" date="1688385609">- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
- commit 030725c</changelog>
  <changelog author="nmorey@suse.com" date="1688385610">- RDMA/hns: Fix hns_roce_table_get return value (git-fixes)
- commit c5a9ac4</changelog>
  <changelog author="nmorey@suse.com" date="1688385611">- RDMA/vmw_pvrdma: Remove unnecessary check on wr-&gt;opcode (git-fixes)
- commit 4a80233</changelog>
  <changelog author="nmorey@suse.com" date="1688385612">- RDMA/bnxt_re: wraparound mbox producer index (git-fixes)
- commit 3193b97</changelog>
  <changelog author="nmorey@suse.com" date="1688385613">- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
- commit 4610493</changelog>
  <changelog author="jgross@suse.com" date="1688385614">- x86/xen: fix secondary processor fpu initialization
  (bsc#1212869).
- commit 8ea47f4</changelog>
  <changelog author="tiwai@suse.de" date="1688385615">- Move upstreamed x86, scsi and arm patches into sorted section
- commit 68279fe</changelog>
  <changelog author="msuchanek@suse.de" date="1688385616">- ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603
  ltc#202604).
- commit 9cf4e75</changelog>
  <changelog author="tiwai@suse.de" date="1688472000">- usb: dwc3: gadget: Propagate core init errors to UDC during
  pullup (git-fixes).
- usb: dwc3-meson-g12a: Fix an error handling path in
  dwc3_meson_g12a_probe() (git-fixes).
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
  (git-fixes).
- usb: dwc3: qcom: Release the correct resources in
  dwc3_qcom_remove() (git-fixes).
- usb: xhci: Remove unused udev from xhci_log_ctx trace event
  (git-fixes).
- usb: hide unused usbfs_notify_suspend/resume functions
  (git-fixes).
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
  (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
  (git-fixes).
- usb: dwc3: qcom: Fix potential memory leak (git-fixes).
- serial: atmel: don't enable IRQs prematurely (git-fixes).
- tty: serial: imx: fix rs485 rx after tx (git-fixes).
- serial: 8250_omap: Use force_suspend and resume for system
  suspend (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() when iterating clk (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() in case of error (git-fixes).
- serial: 8250: lock port for UART_IER access in omap8250_irq()
  (git-fixes).
- serial: 8250: lock port for stop_rx() in omap8250_irq()
  (git-fixes).
- serial: 8250: omap: Fix freeing of resources on failed register
  (git-fixes).
- extcon: Fix kernel doc of property capability fields to avoid
  warnings (git-fixes).
- extcon: Fix kernel doc of property fields to avoid warnings
  (git-fixes).
- misc: fastrpc: Create fastrpc scalar with correct buffer count
  (git-fixes).
- firmware: stratix10-svc: Fix a potential resource leak in
  svc_create_memory_pool() (git-fixes).
- test_firmware: return ENOMEM instead of ENOSPC on failed memory
  allocation (git-fixes).
- meson saradc: fix clock divider mask length (git-fixes).
- iio: accel: fxls8962af: errata bug only applicable for
  FXLS8962AF (git-fixes).
- iio: accel: fxls8962af: fixup buffer scan element type
  (git-fixes).
- iio: adc: ad7192: Fix internal/external clock selection
  (git-fixes).
- iio: adc: ad7192: Fix null ad7192_state pointer access
  (git-fixes).
- w1: fix loop in w1_fini() (git-fixes).
- w1: w1_therm: fix locking behavior in convert_t (git-fixes).
- mfd: stmpe: Only disable the regulators if they are enabled
  (git-fixes).
- mfd: stmfx: Nullify stmfx-&gt;vdd in case of error (git-fixes).
- mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
- mfd: intel-lpss: Add missing check for platform_get_resource
  (git-fixes).
- mfd: pm8008: Fix module autoloading (git-fixes).
- mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
  (git-fixes).
- rtc: st-lpc: Release some resources in st_rtc_probe() in case
  of error (git-fixes).
- extcon: usbc-tusb320: Update state on probe even if no IRQ
  pending (git-fixes).
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a
  port is registered (git-fixes).
- extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
- commit 5d09f51</changelog>
  <changelog author="tiwai@suse.de" date="1688472001">- extcon: usbc-tusb320: Unregister typec port on driver removal
  (git-fixes).
- commit b2eac46</changelog>
  <changelog author="mkoutny@suse.com" date="1688472002">- net/sched: tcindex: Do not use perfect hashing (bsc#1210335
  CVE-2023-1829).
- commit 28b65ec</changelog>
</package>
<package pkgid="68b61cdf6042ad0eec2a41baeb7070e3e6ab364a4909ea5c2c31d813881253b1" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.60.1.150400.24.24.3"/>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
</package>
<package pkgid="8af7f965d95b5c2c7b71dc92a7bdc9bc334535a4e9a21eec42237e6ea83b16e3" name="kernel-default-base" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.60.1.150400.24.24.3"/>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
</package>
<package pkgid="9494d1c9866c1837c67cbd0b5fbecbf1810a94ed48d160f2aab764241f2d21ad" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.60.1.150400.24.24.3"/>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
</package>
<package pkgid="876da6b658f340f0c4fc2375e35f52fcbf9917458ae943c254d7101703910c1f" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.60.1.150400.24.24.3"/>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
</package>
<package pkgid="a9bc9d325da1c5fc60ecdf7a84fd1be7066d477d8a3c5430eba07aa04579b955" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.63.1.150400.24.27.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="8b6fb35c08d13a0624a883d5c2ec76c76666480481105471a9910e483522d091" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.63.1.150400.24.27.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="74a46a27cfabcee748dc179046d637892967b9ac39da1fdcb51d530fd0347427" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.63.1.150400.24.27.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="a339a0913d74d33d0285ab24f4187605f7b75814a80f82609a37c4a49e042c93" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.66.1.150400.24.29.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="2661c8014e747d32271593740f66f407c67e09eb3d94ab11f06c3580ba617ba9" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.66.1.150400.24.29.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="1aa98eaf5e1f71c666fb3d7c8d355dc70cd9b1d2e4a145fa60ced1c14b7be39e" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.66.1.150400.24.29.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="a4d2fe8f8a78910c88171c62c20c015fb63e3696e04bf38aba49519a484ee67f" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.69.1.150400.24.31.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="a2218b38bd241072961f5c79313ccd12762013f498d2a2704c7e1ed9a7113e01" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.69.1.150400.24.31.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="f71e674c9a83b067424605daef5d7ee0dd4ebe128189717e4096151719cfed9d" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.69.1.150400.24.31.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="f10d17733fe93736ba695d216fa742851420da8d45745e6cc668346f8b0b8237" name="kernel-firmware" arch="src">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="f291bc0ae6b424a45818ef32ae10972964cc59dee500a008dd88c9cb89fef053" name="kernel-firmware-all" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="eef8f791b5d198924df8c25ee38e37331be19a95c3317b6f9ee3f3f0ffb47e4f" name="kernel-firmware-amdgpu" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="4f845979573a4b95d64c618f0e7732a71f1cec88dba9f02a55d3615927bbafe8" name="kernel-firmware-ath10k" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="f373e5cfb64812cc75446ad1a1a80533cc82c3247493ee082b9c4d2bb3a241cf" name="kernel-firmware-ath11k" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="f1980a923178fc2dae5b205da5dd532a993bebe79e34b1a0db7b38f1ace2abe1" name="kernel-firmware-atheros" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="18aa6fe8c9026e7f5d242e0fcfb64dfadaeba1ffdc1009cffa1cfbc7ac7a54df" name="kernel-firmware-bluetooth" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="e2404a18303bd004c6a4ca16787efba0f413e161d522ff93894796c50b79ca28" name="kernel-firmware-bnx2" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="9c2ace2c621dc35d9cd0df74f77b8174d4b17dbe0f37c6c25fb6e181abf01492" name="kernel-firmware-brcm" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="df4c3e5076631c1a50351127b3c09443edd626a1d53424c43e9405164b8fbb34" name="kernel-firmware-chelsio" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="f384ae5629cb1c08252f4ed691ffc221656d6b7a49bad011873f142b181493b9" name="kernel-firmware-dpaa2" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="b898af7be2d006002f159063fd8503c533dca62e45363941d633da040e8f2efe" name="kernel-firmware-i915" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="d2a1959cae4a6b26528a614552b2501a543e1b266c39e7aa1a9eed0bc9a7c1a0" name="kernel-firmware-intel" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="7e12175947c85907d5afa648c0cc91935dfca6c10b35f45578315dd706885552" name="kernel-firmware-iwlwifi" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="b6f86da276dade5685f571026d2b144a03f0fb8f6565525df8c9fc99acbd128f" name="kernel-firmware-liquidio" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="1ce375a4168288ee806d28e507983f948b93a6563f761fdb8960f2b07b93febc" name="kernel-firmware-marvell" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="e63904a4f8785bacfaee9901d85398a9a68baa9ef16fc725df57384def563f85" name="kernel-firmware-media" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="6bcd52561b856409f0d121c81369215723b9cc819e088df56d415e6aad7b2f8f" name="kernel-firmware-mediatek" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="94f53656c776b94691e82620f7f34f72df151cabd9f02c0682f7dd060e224c39" name="kernel-firmware-mellanox" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="e8d748d4c7a6b4e71dad4dfc36799bd6bfd1c4a34d3ce6d9f9d6d1f8165300a5" name="kernel-firmware-mwifiex" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="10719b6e6c6197d5f809155d890152b60384bac866f38cf410647d74797d01e5" name="kernel-firmware-network" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="3f4bc6252f38e46643c4c9ce00b09f5f13eba96449104eb7bcd4ae919336b2d4" name="kernel-firmware-nfp" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="e8e21d5a38dc80bcdbcbd746df537a4c2cce56eb91d00d362b2a00dc99c34e32" name="kernel-firmware-nvidia" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="44a1c3c0d5eb6ebdcb2525a8610766e5f5a9401b95106fc3a17a5a43d2ec5640" name="kernel-firmware-platform" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="46e2a2cec4d194fc70b3aedd2757f26d2b9a2add5a350ffacc473ac8c27e13b4" name="kernel-firmware-prestera" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="7971f89538b5261c4938d2b904f819f54834ba0ce119b51dd0963cac416fa80f" name="kernel-firmware-qcom" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="b9b6d7acc80c44470076781062249c4bf5483da0d96ee15556893e4612b0a703" name="kernel-firmware-qlogic" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="c619638e934d9ea83ade7630bb37aafe30983971951c1939573b529ab782b87d" name="kernel-firmware-radeon" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="c19269f74cf217a471cf40be2f63d67639ee2a65481cb3dc32eb0cde5e0f69b8" name="kernel-firmware-realtek" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="8583eb82f47aef7f0ba419be0aea67957a634c25ba7c549af2fb43d0c532b9dd" name="kernel-firmware-serial" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="a38185d813bf02c5acb30bb9327ff463ac3a2c5b85e861ecf7e0a7976110b14e" name="kernel-firmware-sound" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="bb19e43ef8493ce9d6dfd6bd2bab5b6b40d592f52bcdc09d5a45af2b0616f20e" name="kernel-firmware-ti" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="e878d855bc96f5f2378de8bd14c8c3969112b4dac19ec1120978c10e5c70db72" name="kernel-firmware-ueagle" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="023b03a34e2d852403aba73c33d3b989ba65f2d0968192b13bc83e806145580a" name="kernel-firmware-usb-network" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="bfd42197e94cb2145249749499bf354d304aa4337d3d26577d5aa0e6fd150c79" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.23.1"/>
  <changelog author="tiwai@suse.de" date="1680782400">- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report
  DMI table (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer
  (git-fixes).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
  (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
  (git-fixes).
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
  (git-fixes).
- commit 83ef835</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1680782401">- Update
  patches.suse/Fix-double-fget-in-vhost_net_set_backend.patch
  (git-fixes bsc#1210203 CVE-2023-1838).
  Added CVE reference.
- commit 39f99de</changelog>
  <changelog author="fdmanana@suse.com" date="1680782402">- btrfs: fix race between quota disable and quota assign ioctls
  (CVE-2023-1611 bsc#1209687).
- commit dcf095c</changelog>
  <changelog author="tiwai@suse.de" date="1680868800">- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT
  events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory
  access (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for
  non-uploaded sta (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: cros-ec: Explicitly set .polarity in .get_state()
  (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
  (git-fixes).
- platform/x86: think-lmi: Clean up display of current_value on
  Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing
  ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current
  settings (git-fixes).
- commit a8eaaa9</changelog>
  <changelog author="tiwai@suse.de" date="1680868801">- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
  (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP
  platform (git-fixes).
- commit f336cd9</changelog>
  <changelog author="tiwai@suse.de" date="1680955200">- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it
  (git-fixes).
- commit b56644c</changelog>
  <changelog author="tiwai@suse.de" date="1681041600">- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
  (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit
  (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present
  (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete
  when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
  (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler
  (git-fixes).
- usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- usb: typec: altmodes/displayport: Fix configure initial pin
  assignment (git-fixes).
- xhci: Free the command allocated for setting LPM if we return
  early (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough
  iommu (git-fixes).
- usb: xhci: tegra: fix sleep in atomic call (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- commit 3aae146</changelog>
  <changelog author="tiwai@suse.de" date="1681041601">- kABI workaround for xhci (git-fixes).
- commit cbab93c</changelog>
  <changelog author="palcantara@suse.de" date="1681128000">- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- commit cdf6666</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214400">- tracing: Fix wrong return in kprobe_event_gen_test.c
  (git-fixes).
- commit f76dcf0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214401">- mm: mmap: remove newline at the end of the trace (git-fixes).
- commit 01340e1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214402">- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- commit cb9e9b0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214403">- ring-buffer: Fix race while reader and writer are on the same
  page (git-fixes).
- commit c740036</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214404">- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- commit 46954c5</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214405">- tracing: Have tracing_snapshot_instance_cond() write errors
  to the appropriate instance (git-fixes).
- commit b3421ec</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214406">- tracing: Free error logs of tracing instances (git-fixes).
- commit b4f001c</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214407">- ftrace: Fix issue that 'direct-&gt;addr' not restored in
  modify_ftrace_direct() (git-fixes).
- commit 03fd814</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214408">- blacklist.conf: add a not-relevant ftrace commit
- commit 2220417</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214409">- tracing: Add trace_array_puts() to write into instance
  (git-fixes).
- commit 059865f</changelog>
  <changelog author="tiwai@suse.de" date="1681300800">- mtd: rawnand: meson: fix bitmask for length in command word
  (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking
  tRC_min (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
  (git-fixes).
- commit 6504d96</changelog>
</package>
<package pkgid="6decfc493b6654526437d26929a90cbbb66adc15e9b0410ca1e708071ef619de" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.23.1"/>
  <changelog author="tiwai@suse.de" date="1680782400">- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report
  DMI table (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer
  (git-fixes).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
  (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
  (git-fixes).
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
  (git-fixes).
- commit 83ef835</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1680782401">- Update
  patches.suse/Fix-double-fget-in-vhost_net_set_backend.patch
  (git-fixes bsc#1210203 CVE-2023-1838).
  Added CVE reference.
- commit 39f99de</changelog>
  <changelog author="fdmanana@suse.com" date="1680782402">- btrfs: fix race between quota disable and quota assign ioctls
  (CVE-2023-1611 bsc#1209687).
- commit dcf095c</changelog>
  <changelog author="tiwai@suse.de" date="1680868800">- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT
  events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory
  access (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for
  non-uploaded sta (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: cros-ec: Explicitly set .polarity in .get_state()
  (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
  (git-fixes).
- platform/x86: think-lmi: Clean up display of current_value on
  Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing
  ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current
  settings (git-fixes).
- commit a8eaaa9</changelog>
  <changelog author="tiwai@suse.de" date="1680868801">- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
  (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP
  platform (git-fixes).
- commit f336cd9</changelog>
  <changelog author="tiwai@suse.de" date="1680955200">- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it
  (git-fixes).
- commit b56644c</changelog>
  <changelog author="tiwai@suse.de" date="1681041600">- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
  (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit
  (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present
  (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete
  when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
  (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler
  (git-fixes).
- usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- usb: typec: altmodes/displayport: Fix configure initial pin
  assignment (git-fixes).
- xhci: Free the command allocated for setting LPM if we return
  early (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough
  iommu (git-fixes).
- usb: xhci: tegra: fix sleep in atomic call (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- commit 3aae146</changelog>
  <changelog author="tiwai@suse.de" date="1681041601">- kABI workaround for xhci (git-fixes).
- commit cbab93c</changelog>
  <changelog author="palcantara@suse.de" date="1681128000">- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- commit cdf6666</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214400">- tracing: Fix wrong return in kprobe_event_gen_test.c
  (git-fixes).
- commit f76dcf0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214401">- mm: mmap: remove newline at the end of the trace (git-fixes).
- commit 01340e1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214402">- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- commit cb9e9b0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214403">- ring-buffer: Fix race while reader and writer are on the same
  page (git-fixes).
- commit c740036</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214404">- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- commit 46954c5</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214405">- tracing: Have tracing_snapshot_instance_cond() write errors
  to the appropriate instance (git-fixes).
- commit b3421ec</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214406">- tracing: Free error logs of tracing instances (git-fixes).
- commit b4f001c</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214407">- ftrace: Fix issue that 'direct-&gt;addr' not restored in
  modify_ftrace_direct() (git-fixes).
- commit 03fd814</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214408">- blacklist.conf: add a not-relevant ftrace commit
- commit 2220417</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214409">- tracing: Add trace_array_puts() to write into instance
  (git-fixes).
- commit 059865f</changelog>
  <changelog author="tiwai@suse.de" date="1681300800">- mtd: rawnand: meson: fix bitmask for length in command word
  (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking
  tRC_min (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
  (git-fixes).
- commit 6504d96</changelog>
</package>
<package pkgid="55c26fe5eebfe22b4d359c60cfffb75219023b51c15e73412d43f5768c5801b4" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.28.2"/>
  <changelog author="dwagner@suse.de" date="1682596800">- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
- commit da2e21e</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1682596801">- Update
  patches.suse/net-mlx5-DR-Fix-NULL-vs-IS_ERR-checking-in-dr_domain.patch
  (jsc#SLE-19253 bsc#1208845 CVE-2023-23006).
  Added CVE reference.
- commit 53f1f7b</changelog>
  <changelog author="ykaukab@suse.de" date="1682596802">- config: arm64: enable ERRATUM_843419
  Config option was incorrectly replaced by the rt-refresh-configs script
- commit d2c5bee</changelog>
  <changelog author="ykaukab@suse.de" date="1682596803">- arm64: enable jump-label
  jump-label was disabled on arm64 by a backport error. Refresh
  patches.rt/jump-label-disable-if-stop_machine-is-used.patch to fix the
  error. Update arm64 config to reflect the change.
- commit 7f6bb31</changelog>
  <changelog author="dwagner@suse.de" date="1682596804">- blacklist.conf: add nvme git-fixes
- commit be17720</changelog>
  <changelog author="dwagner@suse.de" date="1682683200">- kabi/severities: ignore KABI for NVMe target (bsc#1174777)
  The target code is only for testing and there are no external users.
- commit a8c10fa</changelog>
  <changelog author="tiwai@suse.de" date="1682683201">- virtio_ring: don't update event idx on get_buf (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  (git-fixes).
- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property
  (git-fixes).
- vmci_host: fix a race condition in vmci_host_poll() causing GPF
  (git-fixes).
- fpga: bridge: fix kernel-doc parameter description (git-fixes).
- driver core: Don't require dynamic_debug for initcall_debug
  probe timing (git-fixes).
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
  (git-fixes).
- staging: iio: resolver: ads1210: fix config mode (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  rtw_scan_timeout_handler() (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  _rtw_join_timeout_handler() (git-fixes).
- serial: 8250: Add missing wakeup event reporting (git-fixes).
- tty: serial: fsl_lpuart: adjust buffer length to the intended
  size (git-fixes).
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  (git-fixes).
- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
- xhci: fix debugfs register accesses while suspended (git-fixes).
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix use after free bug in
  renesas_usb3_remove due to race condition (git-fixes).
- usb: dwc3: gadget: Change condition for processing suspend event
  (git-fixes).
- usb: host: xhci-rcar: remove leftover quirk handling
  (git-fixes).
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on
  error path (git-fixes).
- ipmi: fix SSIF not responding under certain cond (git-fixes).
- ipmi:ssif: Add send_retries increment (git-fixes).
- spi: cadence-quadspi: fix suspend-resume implementations
  (git-fixes).
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
- spi: qup: Don't skip cleanup in remove's error path (git-fixes).
- ASoC: fsl_mqs: move of_node_put() to the correct location
  (git-fixes).
- ASoC: es8316: Handle optional IRQ assignment (git-fixes).
- ASoC: cs35l41: Only disable internal boost (git-fixes).
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config
  (git-fixes).
- PCI: imx6: Install the fault handler only on compatible match
  (git-fixes).
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and
  device_lock (git-fixes).
- PCI/EDR: Clear Device Status after EDR error recovery
  (git-fixes).
- drm/panel: otm8009a: Set backlight parent to panel device
  (git-fixes).
- commit 30ae662</changelog>
  <changelog author="petr.pavlu@suse.com" date="1682683202">- keys: Fix linking a duplicate key to a keyring's assoc_array
  (bsc#1207088).
- commit 52b6749</changelog>
  <changelog author="ykaukab@suse.de" date="1682683203">- ACPI: CPPC: Disable FIE if registers in PCC regions
  (bsc#1210953).
- cpufreq: CPPC: Fix build error without
  CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
- commit 5d50d5f</changelog>
  <changelog author="dwagner@suse.de" date="1682683204">- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
- scsi: lpfc: Silence an incorrect device output (bsc#1210943).
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  (bsc#1210943).
- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting()
  (bsc#1210943).
- scsi: lpfc: Copyright updates for 14.2.0.11 patches
  (bsc#1210943).
- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation
  logic (bsc#1210943).
- scsi: lpfc: Skip waiting for register ready bits when in
  unrecoverable state (bsc#1210943).
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with
  no recovery (bsc#1210943).
- scsi: lpfc: Defer issuing new PLOGI if received RSCN before
  completing REG_LOGIN (bsc#1210943).
- scsi: lpfc: Record LOGO state with discovery engine even if
  aborted (bsc#1210943).
- scsi: lpfc: Fix lockdep warning for rx_monitor lock when
  unloading driver (bsc#1210943).
- scsi: lpfc: Reorder freeing of various DMA buffers and their
  list removal (bsc#1210943).
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer
  overflow (bsc#1210943).
- cpumask: fix incorrect cpumask scanning result checks
  (bsc#1210943).
- scsi: lpfc: Fix double word in comments (bsc#1210943).
- scsi: scsi_transport_fc: Add an additional flag to
  fc_host_fpin_rcv() (bsc#1210943).
- commit 7354766</changelog>
  <changelog author="dwagner@suse.de" date="1682683205">- nvme: send Identify with CNS 06h only to I/O controllers
  (bsc#1209693).
- commit fe51de7</changelog>
  <changelog author="dfaggioli@suse.com" date="1682683206">- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (bsc#1206992
  CVE-2022-2196).
- commit 2cab1a4</changelog>
  <changelog author="neilb@suse.de" date="1682942400">- NFS: Cleanup unused rpc_clnt variable (git-fixes).
- NFSD: callback request does not use correct credential for
  AUTH_SYS (git-fixes).
- sunrpc: only free unix grouplist after RCU settles (git-fixes).
- nfsd: call op_release, even when op_func returns an error
  (git-fixes).
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
  (git-fixes).
- commit aa8b700</changelog>
  <changelog author="tiwai@suse.de" date="1682942401">- power: supply: generic-adc-battery: fix unit scaling
  (git-fixes).
- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if'
  match (git-fixes).
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src
  to reparent (git-fixes).
- clk: add missing of_node_put() in "assigned-clocks" property
  parsing (git-fixes).
- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
- clocksource/drivers/davinci: Fix memory leak in
  davinci_timer_register when init fails (git-fixes).
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
  (git-fixes).
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  (git-fixes).
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
  (git-fixes).
- selftests/kselftest/runner/run_one(): allow running
  non-executable files (git-fixes).
- commit fc18250</changelog>
  <changelog author="tiwai@suse.de" date="1683028800">- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
  (git-fixes).
- Input: hp_sdc_rtc - mark an unused function as __maybe_unused
  (git-fixes).
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current
  time (git-fixes).
- rtc: omap: include header for omap_rtc_power_off_program
  prototype (git-fixes).
- commit 4f6ef5f</changelog>
  <changelog author="mgorman@suse.de" date="1683028801">- locking/rwbase: Mitigate indefinite writer starvation.
  Move out of sorted as the patch has moved within the tip tree.
- commit 0ba915d</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028802">- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
- commit f115e36</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028803">- blacklist.conf: Exclude unrelated kconfig patch
- commit 2595126</changelog>
  <changelog author="mhocko@suse.com" date="1683028804">- Update
  patches.suse/perf-Fix-check-before-add_event_to_groups-in-perf_group_detach.patch
  (git fixes, bsc#1210986, CVE-2023-2235).
- commit c5399e7</changelog>
  <changelog author="vbabka@suse.cz" date="1683028805">- mm: take a page reference when removing device exclusive entries
  (bsc#1211025).
- commit fd0cc4f</changelog>
</package>
<package pkgid="51ca3b4fe8facb57e586e37804c242f40200691e6b60293b88554b6d5b88392a" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.28.2"/>
  <changelog author="dwagner@suse.de" date="1682596800">- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
- commit da2e21e</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1682596801">- Update
  patches.suse/net-mlx5-DR-Fix-NULL-vs-IS_ERR-checking-in-dr_domain.patch
  (jsc#SLE-19253 bsc#1208845 CVE-2023-23006).
  Added CVE reference.
- commit 53f1f7b</changelog>
  <changelog author="ykaukab@suse.de" date="1682596802">- config: arm64: enable ERRATUM_843419
  Config option was incorrectly replaced by the rt-refresh-configs script
- commit d2c5bee</changelog>
  <changelog author="ykaukab@suse.de" date="1682596803">- arm64: enable jump-label
  jump-label was disabled on arm64 by a backport error. Refresh
  patches.rt/jump-label-disable-if-stop_machine-is-used.patch to fix the
  error. Update arm64 config to reflect the change.
- commit 7f6bb31</changelog>
  <changelog author="dwagner@suse.de" date="1682596804">- blacklist.conf: add nvme git-fixes
- commit be17720</changelog>
  <changelog author="dwagner@suse.de" date="1682683200">- kabi/severities: ignore KABI for NVMe target (bsc#1174777)
  The target code is only for testing and there are no external users.
- commit a8c10fa</changelog>
  <changelog author="tiwai@suse.de" date="1682683201">- virtio_ring: don't update event idx on get_buf (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  (git-fixes).
- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property
  (git-fixes).
- vmci_host: fix a race condition in vmci_host_poll() causing GPF
  (git-fixes).
- fpga: bridge: fix kernel-doc parameter description (git-fixes).
- driver core: Don't require dynamic_debug for initcall_debug
  probe timing (git-fixes).
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
  (git-fixes).
- staging: iio: resolver: ads1210: fix config mode (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  rtw_scan_timeout_handler() (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  _rtw_join_timeout_handler() (git-fixes).
- serial: 8250: Add missing wakeup event reporting (git-fixes).
- tty: serial: fsl_lpuart: adjust buffer length to the intended
  size (git-fixes).
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  (git-fixes).
- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
- xhci: fix debugfs register accesses while suspended (git-fixes).
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix use after free bug in
  renesas_usb3_remove due to race condition (git-fixes).
- usb: dwc3: gadget: Change condition for processing suspend event
  (git-fixes).
- usb: host: xhci-rcar: remove leftover quirk handling
  (git-fixes).
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on
  error path (git-fixes).
- ipmi: fix SSIF not responding under certain cond (git-fixes).
- ipmi:ssif: Add send_retries increment (git-fixes).
- spi: cadence-quadspi: fix suspend-resume implementations
  (git-fixes).
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
- spi: qup: Don't skip cleanup in remove's error path (git-fixes).
- ASoC: fsl_mqs: move of_node_put() to the correct location
  (git-fixes).
- ASoC: es8316: Handle optional IRQ assignment (git-fixes).
- ASoC: cs35l41: Only disable internal boost (git-fixes).
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config
  (git-fixes).
- PCI: imx6: Install the fault handler only on compatible match
  (git-fixes).
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and
  device_lock (git-fixes).
- PCI/EDR: Clear Device Status after EDR error recovery
  (git-fixes).
- drm/panel: otm8009a: Set backlight parent to panel device
  (git-fixes).
- commit 30ae662</changelog>
  <changelog author="petr.pavlu@suse.com" date="1682683202">- keys: Fix linking a duplicate key to a keyring's assoc_array
  (bsc#1207088).
- commit 52b6749</changelog>
  <changelog author="ykaukab@suse.de" date="1682683203">- ACPI: CPPC: Disable FIE if registers in PCC regions
  (bsc#1210953).
- cpufreq: CPPC: Fix build error without
  CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
- commit 5d50d5f</changelog>
  <changelog author="dwagner@suse.de" date="1682683204">- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
- scsi: lpfc: Silence an incorrect device output (bsc#1210943).
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  (bsc#1210943).
- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting()
  (bsc#1210943).
- scsi: lpfc: Copyright updates for 14.2.0.11 patches
  (bsc#1210943).
- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation
  logic (bsc#1210943).
- scsi: lpfc: Skip waiting for register ready bits when in
  unrecoverable state (bsc#1210943).
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with
  no recovery (bsc#1210943).
- scsi: lpfc: Defer issuing new PLOGI if received RSCN before
  completing REG_LOGIN (bsc#1210943).
- scsi: lpfc: Record LOGO state with discovery engine even if
  aborted (bsc#1210943).
- scsi: lpfc: Fix lockdep warning for rx_monitor lock when
  unloading driver (bsc#1210943).
- scsi: lpfc: Reorder freeing of various DMA buffers and their
  list removal (bsc#1210943).
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer
  overflow (bsc#1210943).
- cpumask: fix incorrect cpumask scanning result checks
  (bsc#1210943).
- scsi: lpfc: Fix double word in comments (bsc#1210943).
- scsi: scsi_transport_fc: Add an additional flag to
  fc_host_fpin_rcv() (bsc#1210943).
- commit 7354766</changelog>
  <changelog author="dwagner@suse.de" date="1682683205">- nvme: send Identify with CNS 06h only to I/O controllers
  (bsc#1209693).
- commit fe51de7</changelog>
  <changelog author="dfaggioli@suse.com" date="1682683206">- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (bsc#1206992
  CVE-2022-2196).
- commit 2cab1a4</changelog>
  <changelog author="neilb@suse.de" date="1682942400">- NFS: Cleanup unused rpc_clnt variable (git-fixes).
- NFSD: callback request does not use correct credential for
  AUTH_SYS (git-fixes).
- sunrpc: only free unix grouplist after RCU settles (git-fixes).
- nfsd: call op_release, even when op_func returns an error
  (git-fixes).
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
  (git-fixes).
- commit aa8b700</changelog>
  <changelog author="tiwai@suse.de" date="1682942401">- power: supply: generic-adc-battery: fix unit scaling
  (git-fixes).
- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if'
  match (git-fixes).
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src
  to reparent (git-fixes).
- clk: add missing of_node_put() in "assigned-clocks" property
  parsing (git-fixes).
- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
- clocksource/drivers/davinci: Fix memory leak in
  davinci_timer_register when init fails (git-fixes).
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
  (git-fixes).
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  (git-fixes).
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
  (git-fixes).
- selftests/kselftest/runner/run_one(): allow running
  non-executable files (git-fixes).
- commit fc18250</changelog>
  <changelog author="tiwai@suse.de" date="1683028800">- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
  (git-fixes).
- Input: hp_sdc_rtc - mark an unused function as __maybe_unused
  (git-fixes).
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current
  time (git-fixes).
- rtc: omap: include header for omap_rtc_power_off_program
  prototype (git-fixes).
- commit 4f6ef5f</changelog>
  <changelog author="mgorman@suse.de" date="1683028801">- locking/rwbase: Mitigate indefinite writer starvation.
  Move out of sorted as the patch has moved within the tip tree.
- commit 0ba915d</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028802">- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
- commit f115e36</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028803">- blacklist.conf: Exclude unrelated kconfig patch
- commit 2595126</changelog>
  <changelog author="mhocko@suse.com" date="1683028804">- Update
  patches.suse/perf-Fix-check-before-add_event_to_groups-in-perf_group_detach.patch
  (git fixes, bsc#1210986, CVE-2023-2235).
- commit c5399e7</changelog>
  <changelog author="vbabka@suse.cz" date="1683028805">- mm: take a page reference when removing device exclusive entries
  (bsc#1211025).
- commit fd0cc4f</changelog>
</package>
<package pkgid="6ee76a13af3b839232c9d8e6f562eef29223259e44006c4e6e7945da377cee42" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.37.2"/>
  <changelog author="lhenriques@suse.de" date="1687262400">- ceph: fix use-after-free bug for inodes when flushing capsnaps
  (bsc#1212540).
- commit c22ab50</changelog>
  <changelog author="mhocko@suse.com" date="1687262401">- binfmt_elf: Take the mmap lock when walking the VMA list
  (bsc#1209039 CVE-2023-1249).
- commit bc9a5c4</changelog>
  <changelog author="nik.borisov@suse.com" date="1687262402">- Refresh patches.suse/init-invoke-arch_cpu_finalize_init-earlier.patch.
  Move arch_cpu_finalize_init() to the correct place.
- commit 87f94ba</changelog>
  <changelog author="nik.borisov@suse.com" date="1687262403">- mm: Move mm_cachep initialization to mm_init() (bsc#1212448).
- commit b8943a6</changelog>
  <changelog author="nik.borisov@suse.com" date="1687262404">- x86/mm: Initialize text poking earlier (bsc#1212448).
- Refresh patches.suse/init-provide-arch_cpu_finalize_init.patch.
- Refresh patches.suse/init-remove-check_bugs-leftovers.patch.
- commit fe545d9</changelog>
  <changelog author="tiwai@suse.de" date="1687348800">- ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep()
  (git-fixes).
- commit 7ecdfc8</changelog>
  <changelog author="jlee@suse.com" date="1687348801">- Update References tag
  patches.suse/usb-gadget-udc-renesas_usb3-Fix-use-after-free-bug-i.patch
  (git-fixes bsc#1212513 CVE-2023-35828).
- commit 058d07e</changelog>
  <changelog author="vbabka@suse.cz" date="1687348802">- mm: vmalloc: avoid warn_alloc noise caused by fatal signal
  (bsc#1211410).
- commit 0352c7c</changelog>
  <changelog author="mkoutny@suse.com" date="1687348803">- cgroup: always put cset in cgroup_css_set_put_fork
  (bsc#1212561).
- commit ae170c0</changelog>
  <changelog author="vbabka@suse.cz" date="1687348804">- mm/vmalloc: do not output a spurious warning when huge vmalloc()
  fails (bsc#1211410).
- commit ae4e43c</changelog>
  <changelog author="mkoutny@suse.com" date="1687348805">- cgroup: fix missing cpus_read_{lock,unlock}() in
  cgroup_transfer_tasks() (bsc#1212563).
- commit 2b82ccd</changelog>
  <changelog author="mkoutny@suse.com" date="1687348806">- bpf: Fix UAF in task local storage (bsc#1212564).
- commit 26b737d</changelog>
  <changelog author="nik.borisov@suse.com" date="1687348807">- x86/mm: Use mm_alloc() in poking_init() (bsc#1212448).
- commit ae2a42d</changelog>
  <changelog author="iivanov@suse.de" date="1687348808">- spi: tegra210-quad: Multi-cs support (bsc#1212584)
- commit 1e10d7b</changelog>
  <changelog author="iivanov@suse.de" date="1687348809">- spi: tegra210-quad: Fix combined sequence (bsc#1212584)
- commit 148b744</changelog>
  <changelog author="mkoutny@suse.com" date="1687348810">- cgroup: Use cgroup_attach_{lock,unlock}() from
  cgroup_attach_task_all() (bsc#1212563).
- commit f39cb40</changelog>
  <changelog author="mfranc@suse.cz" date="1687348811">- s390/dasd: Use correct lock while counting channel queue length
  (git-fixes bsc#1212592).
- commit 3416e6e</changelog>
  <changelog author="lduncan@suse.com" date="1687348812">- blacklist.conf: added drbd git-fix
  drbd in kernel no supported/used
- commit d232113</changelog>
  <changelog author="tiwai@suse.de" date="1687435200">- regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes).
- regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes).
- USB: serial: option: add Quectel EM061KGL series (git-fixes).
- drm/amd/display: edp do not add non-edid timings (git-fixes).
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET
  (git-fixes).
- net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes).
- spi: fsl-dspi: avoid SCK glitches with continuous transfers
  (git-fixes).
- nilfs2: fix incomplete buffer cleanup in
  nilfs_btnode_abort_change_key() (git-fixes).
- test_firmware: prevent race conditions by a correct
  implementation of locking (git-fixes).
- ARM: dts: vexpress: add missing cache properties (git-fixes).
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path
  (git-fixes).
- power: supply: Fix logic checking if system is running from
  battery (git-fixes).
- power: supply: Ratelimit no data debug output (git-fixes).
- power: supply: bq27xxx: Use mod_delayed_work() instead of
  cancel() + schedule() (git-fixes).
- power: supply: sc27xx: Fix external_power_changed race
  (git-fixes).
- power: supply: ab8500: Fix external_power_changed race
  (git-fixes).
- ASoC: dwc: move DMA init to snd_soc_dai_driver probe()
  (git-fixes).
- ASoC: soc-pcm: test if a BE can be prepared (git-fixes).
- platform/x86: asus-wmi: Ignore WMI events with codes 0x7B,
  0xC0 (git-fixes).
- regulator: Fix error checking for debugfs_create_dir
  (git-fixes).
- spi: tegra210-quad: Fix iterator outside loop (git-fixes).
- test_firmware: Use kstrtobool() instead of strtobool()
  (git-fixes).
- commit 571f9b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1687435201">- x86/mm: fix poking_init() for Xen PV guests (git-fixes).
- commit 3f14de3</changelog>
</package>
<package pkgid="1330b7d4914b6acf06d1d21ab66c2c18b5d5b8074102d24d97aff16b635f09e5" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.37.2"/>
  <changelog author="lhenriques@suse.de" date="1687262400">- ceph: fix use-after-free bug for inodes when flushing capsnaps
  (bsc#1212540).
- commit c22ab50</changelog>
  <changelog author="mhocko@suse.com" date="1687262401">- binfmt_elf: Take the mmap lock when walking the VMA list
  (bsc#1209039 CVE-2023-1249).
- commit bc9a5c4</changelog>
  <changelog author="nik.borisov@suse.com" date="1687262402">- Refresh patches.suse/init-invoke-arch_cpu_finalize_init-earlier.patch.
  Move arch_cpu_finalize_init() to the correct place.
- commit 87f94ba</changelog>
  <changelog author="nik.borisov@suse.com" date="1687262403">- mm: Move mm_cachep initialization to mm_init() (bsc#1212448).
- commit b8943a6</changelog>
  <changelog author="nik.borisov@suse.com" date="1687262404">- x86/mm: Initialize text poking earlier (bsc#1212448).
- Refresh patches.suse/init-provide-arch_cpu_finalize_init.patch.
- Refresh patches.suse/init-remove-check_bugs-leftovers.patch.
- commit fe545d9</changelog>
  <changelog author="tiwai@suse.de" date="1687348800">- ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep()
  (git-fixes).
- commit 7ecdfc8</changelog>
  <changelog author="jlee@suse.com" date="1687348801">- Update References tag
  patches.suse/usb-gadget-udc-renesas_usb3-Fix-use-after-free-bug-i.patch
  (git-fixes bsc#1212513 CVE-2023-35828).
- commit 058d07e</changelog>
  <changelog author="vbabka@suse.cz" date="1687348802">- mm: vmalloc: avoid warn_alloc noise caused by fatal signal
  (bsc#1211410).
- commit 0352c7c</changelog>
  <changelog author="mkoutny@suse.com" date="1687348803">- cgroup: always put cset in cgroup_css_set_put_fork
  (bsc#1212561).
- commit ae170c0</changelog>
  <changelog author="vbabka@suse.cz" date="1687348804">- mm/vmalloc: do not output a spurious warning when huge vmalloc()
  fails (bsc#1211410).
- commit ae4e43c</changelog>
  <changelog author="mkoutny@suse.com" date="1687348805">- cgroup: fix missing cpus_read_{lock,unlock}() in
  cgroup_transfer_tasks() (bsc#1212563).
- commit 2b82ccd</changelog>
  <changelog author="mkoutny@suse.com" date="1687348806">- bpf: Fix UAF in task local storage (bsc#1212564).
- commit 26b737d</changelog>
  <changelog author="nik.borisov@suse.com" date="1687348807">- x86/mm: Use mm_alloc() in poking_init() (bsc#1212448).
- commit ae2a42d</changelog>
  <changelog author="iivanov@suse.de" date="1687348808">- spi: tegra210-quad: Multi-cs support (bsc#1212584)
- commit 1e10d7b</changelog>
  <changelog author="iivanov@suse.de" date="1687348809">- spi: tegra210-quad: Fix combined sequence (bsc#1212584)
- commit 148b744</changelog>
  <changelog author="mkoutny@suse.com" date="1687348810">- cgroup: Use cgroup_attach_{lock,unlock}() from
  cgroup_attach_task_all() (bsc#1212563).
- commit f39cb40</changelog>
  <changelog author="mfranc@suse.cz" date="1687348811">- s390/dasd: Use correct lock while counting channel queue length
  (git-fixes bsc#1212592).
- commit 3416e6e</changelog>
  <changelog author="lduncan@suse.com" date="1687348812">- blacklist.conf: added drbd git-fix
  drbd in kernel no supported/used
- commit d232113</changelog>
  <changelog author="tiwai@suse.de" date="1687435200">- regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes).
- regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes).
- USB: serial: option: add Quectel EM061KGL series (git-fixes).
- drm/amd/display: edp do not add non-edid timings (git-fixes).
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET
  (git-fixes).
- net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes).
- spi: fsl-dspi: avoid SCK glitches with continuous transfers
  (git-fixes).
- nilfs2: fix incomplete buffer cleanup in
  nilfs_btnode_abort_change_key() (git-fixes).
- test_firmware: prevent race conditions by a correct
  implementation of locking (git-fixes).
- ARM: dts: vexpress: add missing cache properties (git-fixes).
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path
  (git-fixes).
- power: supply: Fix logic checking if system is running from
  battery (git-fixes).
- power: supply: Ratelimit no data debug output (git-fixes).
- power: supply: bq27xxx: Use mod_delayed_work() instead of
  cancel() + schedule() (git-fixes).
- power: supply: sc27xx: Fix external_power_changed race
  (git-fixes).
- power: supply: ab8500: Fix external_power_changed race
  (git-fixes).
- ASoC: dwc: move DMA init to snd_soc_dai_driver probe()
  (git-fixes).
- ASoC: soc-pcm: test if a BE can be prepared (git-fixes).
- platform/x86: asus-wmi: Ignore WMI events with codes 0x7B,
  0xC0 (git-fixes).
- regulator: Fix error checking for debugfs_create_dir
  (git-fixes).
- spi: tegra210-quad: Fix iterator outside loop (git-fixes).
- test_firmware: Use kstrtobool() instead of strtobool()
  (git-fixes).
- commit 571f9b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1687435201">- x86/mm: fix poking_init() for Xen PV guests (git-fixes).
- commit 3f14de3</changelog>
</package>
<package pkgid="fad6e289caf186ff121a45a5ac5b0341f05b714be8e226c264415a98a22154fa" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.40.1"/>
  <changelog author="nmorey@suse.com" date="1688385600">- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
- commit fa23528</changelog>
  <changelog author="nmorey@suse.com" date="1688385601">- RDMA/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
- commit 0f82e06</changelog>
  <changelog author="nmorey@suse.com" date="1688385602">- RDMA/bnxt_re: Use unique names while registering interrupts (git-fixes)
- commit 4d45831</changelog>
  <changelog author="nmorey@suse.com" date="1688385603">- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
- commit 5fd5166</changelog>
  <changelog author="nmorey@suse.com" date="1688385604">- RDMA/bnxt_re: Fix to remove an unnecessary log (git-fixes)
- commit 5b86f20</changelog>
  <changelog author="nmorey@suse.com" date="1688385605">- RDMA/bnxt_re: Return directly without goto jumps (git-fixes)
- commit a16408a</changelog>
  <changelog author="nmorey@suse.com" date="1688385606">- RDMA/bnxt_re: Remove unnecessary checks (git-fixes)
- commit 465a1cc</changelog>
  <changelog author="nmorey@suse.com" date="1688385607">- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
- commit 5d11670</changelog>
  <changelog author="nmorey@suse.com" date="1688385608">- RDMA/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
- commit 9e18a28</changelog>
  <changelog author="nmorey@suse.com" date="1688385609">- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
- commit 030725c</changelog>
  <changelog author="nmorey@suse.com" date="1688385610">- RDMA/hns: Fix hns_roce_table_get return value (git-fixes)
- commit c5a9ac4</changelog>
  <changelog author="nmorey@suse.com" date="1688385611">- RDMA/vmw_pvrdma: Remove unnecessary check on wr-&gt;opcode (git-fixes)
- commit 4a80233</changelog>
  <changelog author="nmorey@suse.com" date="1688385612">- RDMA/bnxt_re: wraparound mbox producer index (git-fixes)
- commit 3193b97</changelog>
  <changelog author="nmorey@suse.com" date="1688385613">- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
- commit 4610493</changelog>
  <changelog author="jgross@suse.com" date="1688385614">- x86/xen: fix secondary processor fpu initialization
  (bsc#1212869).
- commit 8ea47f4</changelog>
  <changelog author="tiwai@suse.de" date="1688385615">- Move upstreamed x86, scsi and arm patches into sorted section
- commit 68279fe</changelog>
  <changelog author="msuchanek@suse.de" date="1688385616">- ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603
  ltc#202604).
- commit 9cf4e75</changelog>
  <changelog author="tiwai@suse.de" date="1688472000">- usb: dwc3: gadget: Propagate core init errors to UDC during
  pullup (git-fixes).
- usb: dwc3-meson-g12a: Fix an error handling path in
  dwc3_meson_g12a_probe() (git-fixes).
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
  (git-fixes).
- usb: dwc3: qcom: Release the correct resources in
  dwc3_qcom_remove() (git-fixes).
- usb: xhci: Remove unused udev from xhci_log_ctx trace event
  (git-fixes).
- usb: hide unused usbfs_notify_suspend/resume functions
  (git-fixes).
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
  (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
  (git-fixes).
- usb: dwc3: qcom: Fix potential memory leak (git-fixes).
- serial: atmel: don't enable IRQs prematurely (git-fixes).
- tty: serial: imx: fix rs485 rx after tx (git-fixes).
- serial: 8250_omap: Use force_suspend and resume for system
  suspend (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() when iterating clk (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() in case of error (git-fixes).
- serial: 8250: lock port for UART_IER access in omap8250_irq()
  (git-fixes).
- serial: 8250: lock port for stop_rx() in omap8250_irq()
  (git-fixes).
- serial: 8250: omap: Fix freeing of resources on failed register
  (git-fixes).
- extcon: Fix kernel doc of property capability fields to avoid
  warnings (git-fixes).
- extcon: Fix kernel doc of property fields to avoid warnings
  (git-fixes).
- misc: fastrpc: Create fastrpc scalar with correct buffer count
  (git-fixes).
- firmware: stratix10-svc: Fix a potential resource leak in
  svc_create_memory_pool() (git-fixes).
- test_firmware: return ENOMEM instead of ENOSPC on failed memory
  allocation (git-fixes).
- meson saradc: fix clock divider mask length (git-fixes).
- iio: accel: fxls8962af: errata bug only applicable for
  FXLS8962AF (git-fixes).
- iio: accel: fxls8962af: fixup buffer scan element type
  (git-fixes).
- iio: adc: ad7192: Fix internal/external clock selection
  (git-fixes).
- iio: adc: ad7192: Fix null ad7192_state pointer access
  (git-fixes).
- w1: fix loop in w1_fini() (git-fixes).
- w1: w1_therm: fix locking behavior in convert_t (git-fixes).
- mfd: stmpe: Only disable the regulators if they are enabled
  (git-fixes).
- mfd: stmfx: Nullify stmfx-&gt;vdd in case of error (git-fixes).
- mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
- mfd: intel-lpss: Add missing check for platform_get_resource
  (git-fixes).
- mfd: pm8008: Fix module autoloading (git-fixes).
- mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
  (git-fixes).
- rtc: st-lpc: Release some resources in st_rtc_probe() in case
  of error (git-fixes).
- extcon: usbc-tusb320: Update state on probe even if no IRQ
  pending (git-fixes).
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a
  port is registered (git-fixes).
- extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
- commit 5d09f51</changelog>
  <changelog author="tiwai@suse.de" date="1688472001">- extcon: usbc-tusb320: Unregister typec port on driver removal
  (git-fixes).
- commit b2eac46</changelog>
  <changelog author="mkoutny@suse.com" date="1688472002">- net/sched: tcindex: Do not use perfect hashing (bsc#1210335
  CVE-2023-1829).
- commit 28b65ec</changelog>
</package>
<package pkgid="962208bddb768e4f23a55d3205adbdb4360500f3a673b61c21d5b688efc72da8" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.40.1"/>
  <changelog author="nmorey@suse.com" date="1688385600">- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
- commit fa23528</changelog>
  <changelog author="nmorey@suse.com" date="1688385601">- RDMA/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
- commit 0f82e06</changelog>
  <changelog author="nmorey@suse.com" date="1688385602">- RDMA/bnxt_re: Use unique names while registering interrupts (git-fixes)
- commit 4d45831</changelog>
  <changelog author="nmorey@suse.com" date="1688385603">- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
- commit 5fd5166</changelog>
  <changelog author="nmorey@suse.com" date="1688385604">- RDMA/bnxt_re: Fix to remove an unnecessary log (git-fixes)
- commit 5b86f20</changelog>
  <changelog author="nmorey@suse.com" date="1688385605">- RDMA/bnxt_re: Return directly without goto jumps (git-fixes)
- commit a16408a</changelog>
  <changelog author="nmorey@suse.com" date="1688385606">- RDMA/bnxt_re: Remove unnecessary checks (git-fixes)
- commit 465a1cc</changelog>
  <changelog author="nmorey@suse.com" date="1688385607">- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
- commit 5d11670</changelog>
  <changelog author="nmorey@suse.com" date="1688385608">- RDMA/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
- commit 9e18a28</changelog>
  <changelog author="nmorey@suse.com" date="1688385609">- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
- commit 030725c</changelog>
  <changelog author="nmorey@suse.com" date="1688385610">- RDMA/hns: Fix hns_roce_table_get return value (git-fixes)
- commit c5a9ac4</changelog>
  <changelog author="nmorey@suse.com" date="1688385611">- RDMA/vmw_pvrdma: Remove unnecessary check on wr-&gt;opcode (git-fixes)
- commit 4a80233</changelog>
  <changelog author="nmorey@suse.com" date="1688385612">- RDMA/bnxt_re: wraparound mbox producer index (git-fixes)
- commit 3193b97</changelog>
  <changelog author="nmorey@suse.com" date="1688385613">- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
- commit 4610493</changelog>
  <changelog author="jgross@suse.com" date="1688385614">- x86/xen: fix secondary processor fpu initialization
  (bsc#1212869).
- commit 8ea47f4</changelog>
  <changelog author="tiwai@suse.de" date="1688385615">- Move upstreamed x86, scsi and arm patches into sorted section
- commit 68279fe</changelog>
  <changelog author="msuchanek@suse.de" date="1688385616">- ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603
  ltc#202604).
- commit 9cf4e75</changelog>
  <changelog author="tiwai@suse.de" date="1688472000">- usb: dwc3: gadget: Propagate core init errors to UDC during
  pullup (git-fixes).
- usb: dwc3-meson-g12a: Fix an error handling path in
  dwc3_meson_g12a_probe() (git-fixes).
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
  (git-fixes).
- usb: dwc3: qcom: Release the correct resources in
  dwc3_qcom_remove() (git-fixes).
- usb: xhci: Remove unused udev from xhci_log_ctx trace event
  (git-fixes).
- usb: hide unused usbfs_notify_suspend/resume functions
  (git-fixes).
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
  (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
  (git-fixes).
- usb: dwc3: qcom: Fix potential memory leak (git-fixes).
- serial: atmel: don't enable IRQs prematurely (git-fixes).
- tty: serial: imx: fix rs485 rx after tx (git-fixes).
- serial: 8250_omap: Use force_suspend and resume for system
  suspend (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() when iterating clk (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() in case of error (git-fixes).
- serial: 8250: lock port for UART_IER access in omap8250_irq()
  (git-fixes).
- serial: 8250: lock port for stop_rx() in omap8250_irq()
  (git-fixes).
- serial: 8250: omap: Fix freeing of resources on failed register
  (git-fixes).
- extcon: Fix kernel doc of property capability fields to avoid
  warnings (git-fixes).
- extcon: Fix kernel doc of property fields to avoid warnings
  (git-fixes).
- misc: fastrpc: Create fastrpc scalar with correct buffer count
  (git-fixes).
- firmware: stratix10-svc: Fix a potential resource leak in
  svc_create_memory_pool() (git-fixes).
- test_firmware: return ENOMEM instead of ENOSPC on failed memory
  allocation (git-fixes).
- meson saradc: fix clock divider mask length (git-fixes).
- iio: accel: fxls8962af: errata bug only applicable for
  FXLS8962AF (git-fixes).
- iio: accel: fxls8962af: fixup buffer scan element type
  (git-fixes).
- iio: adc: ad7192: Fix internal/external clock selection
  (git-fixes).
- iio: adc: ad7192: Fix null ad7192_state pointer access
  (git-fixes).
- w1: fix loop in w1_fini() (git-fixes).
- w1: w1_therm: fix locking behavior in convert_t (git-fixes).
- mfd: stmpe: Only disable the regulators if they are enabled
  (git-fixes).
- mfd: stmfx: Nullify stmfx-&gt;vdd in case of error (git-fixes).
- mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
- mfd: intel-lpss: Add missing check for platform_get_resource
  (git-fixes).
- mfd: pm8008: Fix module autoloading (git-fixes).
- mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
  (git-fixes).
- rtc: st-lpc: Release some resources in st_rtc_probe() in case
  of error (git-fixes).
- extcon: usbc-tusb320: Update state on probe even if no IRQ
  pending (git-fixes).
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a
  port is registered (git-fixes).
- extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
- commit 5d09f51</changelog>
  <changelog author="tiwai@suse.de" date="1688472001">- extcon: usbc-tusb320: Unregister typec port on driver removal
  (git-fixes).
- commit b2eac46</changelog>
  <changelog author="mkoutny@suse.com" date="1688472002">- net/sched: tcindex: Do not use perfect hashing (bsc#1210335
  CVE-2023-1829).
- commit 28b65ec</changelog>
</package>
<package pkgid="23691fffda79ffd9086a327d6570d6910f00ba30fef14975ec7ba165a8b224b2" name="kubevirt" arch="src">
  <version epoch="0" ver="0.54.0" rel="150400.3.13.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1625227200">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1630929600">- Update to version 0.44.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.44.1
- Drop patches:
  dont-build-virtctl-darwin.patch
  dont-use-bazel-in-build-manifests.patch
  fix-double-free-of-VirDomain.patch
  fix-virsh-domcapabilities-error.patch (bsc#1185119)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1631188800">- Update to version 0.45.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.45.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
</package>
<package pkgid="5a5f888f5521b03fe73c11c17c788134cdc7f89e974f8c3d735909d102352a03" name="kubevirt" arch="src">
  <version epoch="0" ver="0.54.0" rel="150400.3.16.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1682596800">- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
  0011-Start-serving-the-device-plugin-API-prior-to-registe.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0012-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683806400">- Always render block devices in hp-volume- pod template
  0013-render-hp-volume-pod-should-respect-blockdevices.patch
- Detect ServiceMonitor and PrometheusRule CRDs
  0014-ServiceMonitor-and-PrometheusRule-API-detection-and-.patch</changelog>
</package>
<package pkgid="ad3f11ebb2a7d139fd312538f24da4a0842f9610a633463947533371987b88d1" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="0.54.0" rel="150400.3.13.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1625227200">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1630929600">- Update to version 0.44.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.44.1
- Drop patches:
  dont-build-virtctl-darwin.patch
  dont-use-bazel-in-build-manifests.patch
  fix-double-free-of-VirDomain.patch
  fix-virsh-domcapabilities-error.patch (bsc#1185119)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1631188800">- Update to version 0.45.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.45.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
</package>
<package pkgid="4e6b283ab953e67317f36af9fcfa446d44a949deb82957cf8e614913e3112fc9" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="0.54.0" rel="150400.3.16.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1682596800">- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
  0011-Start-serving-the-device-plugin-API-prior-to-registe.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0012-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683806400">- Always render block devices in hp-volume- pod template
  0013-render-hp-volume-pod-should-respect-blockdevices.patch
- Detect ServiceMonitor and PrometheusRule CRDs
  0014-ServiceMonitor-and-PrometheusRule-API-detection-and-.patch</changelog>
</package>
<package pkgid="ba5bef41dcc4d1a355c322b55ef39096e30b9543a5b52303efe61c9872260362" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="0.54.0" rel="150400.3.13.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1625227200">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1630929600">- Update to version 0.44.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.44.1
- Drop patches:
  dont-build-virtctl-darwin.patch
  dont-use-bazel-in-build-manifests.patch
  fix-double-free-of-VirDomain.patch
  fix-virsh-domcapabilities-error.patch (bsc#1185119)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1631188800">- Update to version 0.45.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.45.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
</package>
<package pkgid="45793cb152365253b00cc667c0471e2f7fa2ac316806e6f4229799b41f95f127" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="0.54.0" rel="150400.3.16.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1682596800">- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
  0011-Start-serving-the-device-plugin-API-prior-to-registe.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0012-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683806400">- Always render block devices in hp-volume- pod template
  0013-render-hp-volume-pod-should-respect-blockdevices.patch
- Detect ServiceMonitor and PrometheusRule CRDs
  0014-ServiceMonitor-and-PrometheusRule-API-detection-and-.patch</changelog>
</package>
<package pkgid="5150653047ee3ce5b4393a430f742f3d0f64bd4d249d41d744676d37f68a6eb9" name="libX11" arch="src">
  <version epoch="0" ver="1.6.5" rel="150000.3.27.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370347200">- Update to final version 1.6.0:
  Changes since libX11 1.5 (found in the release candidates) include fixes
  for the recently announced security issues CVE-2013-1981, CVE-2013-1997,
  and CVE-2013-2004; the addition of the _XEatDataWords API for use by
  Xlib-based extension libraries, to help them avoid integer overflows when
  it is necessary to discard data; removal of ancient, unused, incomplete
  support for the Cray Unicos OS, and the DECnet and TLI transport types;
  numerous improvements to compose files and locale data; man page macro
  cleanups to improve compatibility with doclifter; and various other
  code cleanups and compiler warning fixes.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1375185600">- Update to version 1.6.1:
  This release includes fixes to the code, docs &amp; build system.
  It makes both clang &amp; doclifter happier.  It includes patches
  upstreamed from Ubuntu, NetBSD, and Solaris.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
</package>
<package pkgid="cbd4e69beb882ff159f8fad9cf059867d1c2ec2b0b24e1256f3a87efc4577d3e" name="libX11" arch="src">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1375185600">- Update to version 1.6.1:
  This release includes fixes to the code, docs &amp; build system.
  It makes both clang &amp; doclifter happier.  It includes patches
  upstreamed from Ubuntu, NetBSD, and Solaris.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="38243651224a223bff8eaec397c57762f180d47cae3e705b767477875fe63be3" name="libX11-6" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.27.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
</package>
<package pkgid="2e11f71dc7144150b8a6f27809dcac91fa0eb47b5ed64a89564a03875dfcacd3" name="libX11-6" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.27.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
</package>
<package pkgid="c8e94dadc019282f7165995857f3cb75b1eb85b25371d72079d7710da368841a" name="libX11-6" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.27.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
</package>
<package pkgid="690a3e681f79655cf744d14764ea77535809d16ece0adc2d24be510c8f5a2261" name="libX11-6" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="0271cc8e459dbfa967e74677d52d3981c8061ca9292136096d65e1620c42786d" name="libX11-6" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="e7bac92becdd0e7e216a9072c0e11f60896b7dfdbf181875692a38c95aed3d97" name="libX11-6" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="a39d007b5aae1de803cb9b76827a7477152bb121ab7414adb6401f26bcf53db6" name="libX11-data" arch="noarch">
  <version epoch="0" ver="1.6.5" rel="150000.3.27.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
</package>
<package pkgid="647933eb6c6d422bfec9cce60bbde83348a0d0da8d68f2e34325a54179e466f2" name="libX11-data" arch="noarch">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="a11f38d8ac40e8d35d0e03c750ccf4cdd0ecccf526c1c3439b75d23da3adf59e" name="libX11-xcb1" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.27.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
</package>
<package pkgid="0b39dd1df625e23688ad712e6e363d255e0bc6eaad4de582f2876626099d9d3a" name="libX11-xcb1" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.27.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
</package>
<package pkgid="07dff8f1db319ed94d1c53287d7036483bef6823038b35850454380f20d1b4ba" name="libX11-xcb1" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.27.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
</package>
<package pkgid="53866c62f3d61fc27d2689f113a22897fd57144d7c8f73e8693bf60f88d90217" name="libX11-xcb1" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="24488c0333ce7b6b562b1034be7d0cc82b92bd4d96ba77cb85ec1bf84d99dae0" name="libX11-xcb1" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="a6b0cf8ee8446f3c3268afff527f390837669f126c8f108991ce3daac1bb67f8" name="libX11-xcb1" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="516237645b6823f271041870280f94866a4860f2a38525becaa4545e107613fe" name="libappindicator3-1" arch="aarch64">
  <version epoch="0" ver="12.10.1+bzr20170215" rel="150200.3.3.1"/>
  <changelog author="schwab@suse.de" date="1425556800">- Allow building without mono support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.1+bzr20141110:
  * scroll-event: change parameter to the right type.
- Rebase 0001_Fix_mono_dir.patch.
- Remove no-deprecated.patch: merged upstream.
- Remove dont-build-examples.patch: fixed upstream.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1465819200">- Little spec cleanup.</changelog>
  <changelog author="t.gruner@katodev.de" date="1467892800">- Allow building with mono support in case without mono is set</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492603200">- Update to version 12.10.1+bzr20170215 (changes since
  12.10.1+bzr20141110):
  * Handle watcher service appearing and disappearing.
  * Make test-simple-app really working.
  * Fix icon and theme paths when running in $SNAP environment
    (lp#1600136).
  * Do not emit label changes when guide is still empty.
  * Do not append the snap prefix if the icon is saved in a well
    known readable path.
- Add libappindicator-activate-support.patch: Open menu on the
  left-click action (lp#1403449).
- Rename python-appindicator to python2-appindicator.</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Rename %soname to %sover to better reflect its purpose.
- Update summaries.
- Remove redundant pkgconfig() reqiures; these are already
  autodiscovered.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Disable building of -doc subpackage (source not compatible with
  gtk-doc 1.26 - and the doc is available online anyway):
  + Remove gtk-doc BuildRequires.
  + Replace --enable-gtk-doc configure parameter with
  - -disable-gtk-doc,
  + Drop the -doc subpackage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Add libappindicator-no-Werror.patch: the libappindicator code is
  aging and is not keeping up well with the moving world around it.</changelog>
  <changelog author="ximi.obs@gmail.com" date="1547294400">- Changed the activate-support patch to signal an "activate-event"
  so users can create callbacks themselves.
  Original patch from Yichao Yu &lt;yyc1992@gmail.com&gt;.</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557921600">- Drop libappindicator-activate-support.patch as it's no longer needed and
  breaks context menu / actions in fall-back mode (boo#1132659)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Split gtk2 and gtk3 builds using _multibuild. Python2 and Mono
  bindings are only available for GTK2, so the GTK3 version has
  significantly less build dependencies,
  add only_require_python_for_gtk2.patch
- Drop dependency on deprecated gnome-common, see
  https://wiki.gnome.org/Projects/GnomeCommon/Migration
- Allow configure run to succeed even when gtk-doc is not installed,
  add make_gtk_doc_optional.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569931200">- Make sure the OBS spec file parser does not apply the gtk3 psuffix
  for the default ("") multibuild flavor.</changelog>
  <changelog author="mailaender@opensuse.org" date="1580644800">- Use the vanilla nunit for compatibility with newer Mono</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1581508800">- Added xappstatusicon.patch. It adds support for XAppStatus Icon by
  Linux Mint.</changelog>
  <changelog author="tchvatal@suse.com" date="1584964800">- Fix build on py2 less system</changelog>
  <changelog author="dleuenberger@suse.com" date="1586433600">- Do not apply xappstatusicon.patch: pulls half of Mate into Ring1.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add -fcommon in order to fix boo#1164492.</changelog>
  <changelog author="yfjiang@suse.com" date="1673611200">- Provide RH/Fedora used libappindicator-gtk3 symbol required by
  Slack (bsc#1207112).</changelog>
</package>
<package pkgid="65d485d22b1ea950680c1896fbec4e5f3b4270ef11c052c6c753671acd3dfc85" name="libappindicator3-1" arch="s390x">
  <version epoch="0" ver="12.10.1+bzr20170215" rel="150200.3.3.1"/>
  <changelog author="schwab@suse.de" date="1425556800">- Allow building without mono support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.1+bzr20141110:
  * scroll-event: change parameter to the right type.
- Rebase 0001_Fix_mono_dir.patch.
- Remove no-deprecated.patch: merged upstream.
- Remove dont-build-examples.patch: fixed upstream.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1465819200">- Little spec cleanup.</changelog>
  <changelog author="t.gruner@katodev.de" date="1467892800">- Allow building with mono support in case without mono is set</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492603200">- Update to version 12.10.1+bzr20170215 (changes since
  12.10.1+bzr20141110):
  * Handle watcher service appearing and disappearing.
  * Make test-simple-app really working.
  * Fix icon and theme paths when running in $SNAP environment
    (lp#1600136).
  * Do not emit label changes when guide is still empty.
  * Do not append the snap prefix if the icon is saved in a well
    known readable path.
- Add libappindicator-activate-support.patch: Open menu on the
  left-click action (lp#1403449).
- Rename python-appindicator to python2-appindicator.</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Rename %soname to %sover to better reflect its purpose.
- Update summaries.
- Remove redundant pkgconfig() reqiures; these are already
  autodiscovered.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Disable building of -doc subpackage (source not compatible with
  gtk-doc 1.26 - and the doc is available online anyway):
  + Remove gtk-doc BuildRequires.
  + Replace --enable-gtk-doc configure parameter with
  - -disable-gtk-doc,
  + Drop the -doc subpackage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Add libappindicator-no-Werror.patch: the libappindicator code is
  aging and is not keeping up well with the moving world around it.</changelog>
  <changelog author="ximi.obs@gmail.com" date="1547294400">- Changed the activate-support patch to signal an "activate-event"
  so users can create callbacks themselves.
  Original patch from Yichao Yu &lt;yyc1992@gmail.com&gt;.</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557921600">- Drop libappindicator-activate-support.patch as it's no longer needed and
  breaks context menu / actions in fall-back mode (boo#1132659)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Split gtk2 and gtk3 builds using _multibuild. Python2 and Mono
  bindings are only available for GTK2, so the GTK3 version has
  significantly less build dependencies,
  add only_require_python_for_gtk2.patch
- Drop dependency on deprecated gnome-common, see
  https://wiki.gnome.org/Projects/GnomeCommon/Migration
- Allow configure run to succeed even when gtk-doc is not installed,
  add make_gtk_doc_optional.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569931200">- Make sure the OBS spec file parser does not apply the gtk3 psuffix
  for the default ("") multibuild flavor.</changelog>
  <changelog author="mailaender@opensuse.org" date="1580644800">- Use the vanilla nunit for compatibility with newer Mono</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1581508800">- Added xappstatusicon.patch. It adds support for XAppStatus Icon by
  Linux Mint.</changelog>
  <changelog author="tchvatal@suse.com" date="1584964800">- Fix build on py2 less system</changelog>
  <changelog author="dleuenberger@suse.com" date="1586433600">- Do not apply xappstatusicon.patch: pulls half of Mate into Ring1.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add -fcommon in order to fix boo#1164492.</changelog>
  <changelog author="yfjiang@suse.com" date="1673611200">- Provide RH/Fedora used libappindicator-gtk3 symbol required by
  Slack (bsc#1207112).</changelog>
</package>
<package pkgid="8bc0021181e33276b839ba5548ab6f13af444f937808702206017ec6abd02c91" name="libappindicator3-1" arch="x86_64">
  <version epoch="0" ver="12.10.1+bzr20170215" rel="150200.3.3.1"/>
  <changelog author="schwab@suse.de" date="1425556800">- Allow building without mono support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.1+bzr20141110:
  * scroll-event: change parameter to the right type.
- Rebase 0001_Fix_mono_dir.patch.
- Remove no-deprecated.patch: merged upstream.
- Remove dont-build-examples.patch: fixed upstream.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1465819200">- Little spec cleanup.</changelog>
  <changelog author="t.gruner@katodev.de" date="1467892800">- Allow building with mono support in case without mono is set</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492603200">- Update to version 12.10.1+bzr20170215 (changes since
  12.10.1+bzr20141110):
  * Handle watcher service appearing and disappearing.
  * Make test-simple-app really working.
  * Fix icon and theme paths when running in $SNAP environment
    (lp#1600136).
  * Do not emit label changes when guide is still empty.
  * Do not append the snap prefix if the icon is saved in a well
    known readable path.
- Add libappindicator-activate-support.patch: Open menu on the
  left-click action (lp#1403449).
- Rename python-appindicator to python2-appindicator.</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Rename %soname to %sover to better reflect its purpose.
- Update summaries.
- Remove redundant pkgconfig() reqiures; these are already
  autodiscovered.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Disable building of -doc subpackage (source not compatible with
  gtk-doc 1.26 - and the doc is available online anyway):
  + Remove gtk-doc BuildRequires.
  + Replace --enable-gtk-doc configure parameter with
  - -disable-gtk-doc,
  + Drop the -doc subpackage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Add libappindicator-no-Werror.patch: the libappindicator code is
  aging and is not keeping up well with the moving world around it.</changelog>
  <changelog author="ximi.obs@gmail.com" date="1547294400">- Changed the activate-support patch to signal an "activate-event"
  so users can create callbacks themselves.
  Original patch from Yichao Yu &lt;yyc1992@gmail.com&gt;.</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557921600">- Drop libappindicator-activate-support.patch as it's no longer needed and
  breaks context menu / actions in fall-back mode (boo#1132659)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Split gtk2 and gtk3 builds using _multibuild. Python2 and Mono
  bindings are only available for GTK2, so the GTK3 version has
  significantly less build dependencies,
  add only_require_python_for_gtk2.patch
- Drop dependency on deprecated gnome-common, see
  https://wiki.gnome.org/Projects/GnomeCommon/Migration
- Allow configure run to succeed even when gtk-doc is not installed,
  add make_gtk_doc_optional.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569931200">- Make sure the OBS spec file parser does not apply the gtk3 psuffix
  for the default ("") multibuild flavor.</changelog>
  <changelog author="mailaender@opensuse.org" date="1580644800">- Use the vanilla nunit for compatibility with newer Mono</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1581508800">- Added xappstatusicon.patch. It adds support for XAppStatus Icon by
  Linux Mint.</changelog>
  <changelog author="tchvatal@suse.com" date="1584964800">- Fix build on py2 less system</changelog>
  <changelog author="dleuenberger@suse.com" date="1586433600">- Do not apply xappstatusicon.patch: pulls half of Mate into Ring1.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add -fcommon in order to fix boo#1164492.</changelog>
  <changelog author="yfjiang@suse.com" date="1673611200">- Provide RH/Fedora used libappindicator-gtk3 symbol required by
  Slack (bsc#1207112).</changelog>
</package>
<package pkgid="cd1c5fbddfb76f082996a1c483f3f0bdae59ce982be62422cda5523d8b9fe97a" name="libappindicator3" arch="src">
  <version epoch="0" ver="12.10.1+bzr20170215" rel="150200.3.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1394452800">- Fix license; src/generate-id.c is released and distributed under
  GPL-3.0 license</changelog>
  <changelog author="p.drouand@gmail.com" date="1394539200">- Fix appindicator-sharp require in appindicator-sharp-devel</changelog>
  <changelog author="schwab@suse.de" date="1425556800">- Allow building without mono support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.1+bzr20141110:
  * scroll-event: change parameter to the right type.
- Rebase 0001_Fix_mono_dir.patch.
- Remove no-deprecated.patch: merged upstream.
- Remove dont-build-examples.patch: fixed upstream.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1465819200">- Little spec cleanup.</changelog>
  <changelog author="t.gruner@katodev.de" date="1467892800">- Allow building with mono support in case without mono is set</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492603200">- Update to version 12.10.1+bzr20170215 (changes since
  12.10.1+bzr20141110):
  * Handle watcher service appearing and disappearing.
  * Make test-simple-app really working.
  * Fix icon and theme paths when running in $SNAP environment
    (lp#1600136).
  * Do not emit label changes when guide is still empty.
  * Do not append the snap prefix if the icon is saved in a well
    known readable path.
- Add libappindicator-activate-support.patch: Open menu on the
  left-click action (lp#1403449).
- Rename python-appindicator to python2-appindicator.</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Rename %soname to %sover to better reflect its purpose.
- Update summaries.
- Remove redundant pkgconfig() reqiures; these are already
  autodiscovered.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Disable building of -doc subpackage (source not compatible with
  gtk-doc 1.26 - and the doc is available online anyway):
  + Remove gtk-doc BuildRequires.
  + Replace --enable-gtk-doc configure parameter with
  - -disable-gtk-doc,
  + Drop the -doc subpackage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Add libappindicator-no-Werror.patch: the libappindicator code is
  aging and is not keeping up well with the moving world around it.</changelog>
  <changelog author="ximi.obs@gmail.com" date="1547294400">- Changed the activate-support patch to signal an "activate-event"
  so users can create callbacks themselves.
  Original patch from Yichao Yu &lt;yyc1992@gmail.com&gt;.</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557921600">- Drop libappindicator-activate-support.patch as it's no longer needed and
  breaks context menu / actions in fall-back mode (boo#1132659)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Split gtk2 and gtk3 builds using _multibuild. Python2 and Mono
  bindings are only available for GTK2, so the GTK3 version has
  significantly less build dependencies,
  add only_require_python_for_gtk2.patch
- Drop dependency on deprecated gnome-common, see
  https://wiki.gnome.org/Projects/GnomeCommon/Migration
- Allow configure run to succeed even when gtk-doc is not installed,
  add make_gtk_doc_optional.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569931200">- Make sure the OBS spec file parser does not apply the gtk3 psuffix
  for the default ("") multibuild flavor.</changelog>
  <changelog author="mailaender@opensuse.org" date="1580644800">- Use the vanilla nunit for compatibility with newer Mono</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1581508800">- Added xappstatusicon.patch. It adds support for XAppStatus Icon by
  Linux Mint.</changelog>
  <changelog author="tchvatal@suse.com" date="1584964800">- Fix build on py2 less system</changelog>
  <changelog author="dleuenberger@suse.com" date="1586433600">- Do not apply xappstatusicon.patch: pulls half of Mate into Ring1.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add -fcommon in order to fix boo#1164492.</changelog>
  <changelog author="yfjiang@suse.com" date="1673611200">- Provide RH/Fedora used libappindicator-gtk3 symbol required by
  Slack (bsc#1207112).</changelog>
</package>
<package pkgid="5d0b36991ab233b5568cd69f53e1d6b3fe97a6e94378b37f7a5058336f773de6" name="libaudit1" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="25f63b7ee6f11796525425bbafc5eac5d9a1f9ef929fe429a2dc1d6f205b0e4b" name="libaudit1" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="a277f1f400fcbdbaef3a2cb4165169407a85364adb605b756e5aaa829bdf8115" name="libaudit1" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="d629d0bd2537abc20b1e892feb350def919acd723096b82b1d7064a6116eaa32" name="libauparse0" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="25222168d28ece72a8dc137993849c5b6ec031e7a031f0609fdbabf0068842d7" name="libauparse0" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="b78dcecff45c8073247f8ceaa823c914cd06eb64fe57a6d36e049186e86f4438" name="libauparse0" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="8fc5b8000fd2ad238825a621b77865253e0a76f6118a41baca333f0c822ec240" name="libavahi-client3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="254330469ac9bb25640e260b2fc50b167daeb5ceee400c0459812f2b36de82e8" name="libavahi-client3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="fc99759fc668398616f15d997a85164f55e5f61514a0ad2ad6b2591505dbce59" name="libavahi-client3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="204d441497172d2b26b0f9560d7fcd1bb68c919dc0cc0d5dc405e4b9e575ff13" name="libavahi-common3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="202ae2cc846dd480daf99da70e6020fe294e647db203c4334e664a70876dc46b" name="libavahi-common3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="4ebb50d8e701e754d3a75490bd603f56a4810705321b2991c72f368c05d7d530" name="libavahi-common3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="c83f7a1ebde9d7315d822ffa95d92f4a2cfcc58f2a4661a95365a53d448c3c9f" name="libavahi-core7" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="4a70a39c33bc1c4a5cc441fb84e81cc845280ef8fe46e1abeaffbe731be44217" name="libavahi-core7" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="057ebe65f567b70655d321a581d39b7186252329331ac8fc9b29c25830747cca" name="libavahi-core7" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="7ede034f7054833dd4ee5a35e4aff3c7c79b255d95180c3913dff72b808da426" name="libblkid1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="d997fd2ba6b1ae8f4957ae90ff70397189a93b728e746e320267185706f45455" name="libblkid1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="bc0541c4b5b99be7571611f35adecbf7e76d920abc50d3b41923d75468e88809" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="91074ec6180a60c9a30a9188a762f5cdae3abaf8b223ab2516d50e80af60e3df" name="libbluetooth3" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.13.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="630a81b883e6fe613850288f44c4992e11c0dd81039222b17a1f51484313d566" name="libbluetooth3" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.13.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="a42cd2b8f385bb1d2a14fbff96b56e6982e7303952d496f0290f1eb709a31880" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.13.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="ed81003abf4f913570e102f0bc2c55f020f97c53ef25826e0f224481a6347c44" name="libcap" arch="src">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="2c7f2cc5f2329b3a1f50a53a7289412a03c53c25af4d3d02c0ce68b8ad4c9174" name="libcap2" arch="aarch64">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="e070eb3639ea777eac72b15a740574f8f066e6233bcc21d262222fff2b9f94be" name="libcap2" arch="s390x">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="cfcf0ea8c227094723bd85e5332fb8285af94e7d61d8ecc6e5b455f0900327db" name="libcap2" arch="x86_64">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="b36bcdc929b110141e1de47100b5299c5ce3a10e4dab37020efd09c416cc0a96" name="libcares2" arch="aarch64">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="b9975188055a6a5eaa289c1aa142c2f6564644f74c92fdb4749642eb73da49cf" name="libcares2" arch="s390x">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="6d36384bb2347feb6e1a36c5ecb794ffa36c47e915e335a4c11899c738ea4fda" name="libcares2" arch="x86_64">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="b3e39c66f8b1a8fcb84e7e3d6230214e74b671745879b7bd144a42d786e6ec3d" name="libcontainers-common" arch="noarch">
  <version epoch="0" ver="20230214" rel="150400.3.8.1"/>
  <changelog author="lubos.kocman@suse.com" date="1654516800">- Add registry.suse.com as agreed on oSC22
  Let's advertise usage of BCI images in general</changelog>
  <changelog author="rbrown@suse.com" date="1654689600">- Add missing comma to previous change</changelog>
  <changelog author="dcermak@suse.com" date="1655208000">- Add missing Requires(post): sed, fixes boo#1200524
- Make %post compatible with dash</changelog>
  <changelog author="fvogt@suse.com" date="1655294400">- Use $() again in %post, but with a space for POSIX compliance</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Resync containers.conf / storage.conf with Fedora
- Create /etc/containers/registries.conf.d and
  add 000-shortnames.conf to it.</changelog>
  <changelog author="fvogt@suse.com" date="1660046400">- Fix obvious typo in containers.conf</changelog>
  <changelog author="dmueller@suse.com" date="1666699200">- set detached sigstore attachments for the SUSE controlled registries</changelog>
  <changelog author="dmueller@suse.com" date="1668081600">- postinstall script: slight cleanup, no functional change</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- add container-storage-driver.sh (bsc#1197093)</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
</package>
<package pkgid="83876ee2d32f3d5189565bfeb17d66ca78b581ec4e54e00295d4f457303a8d28" name="libcontainers-common" arch="src">
  <version epoch="0" ver="20230214" rel="150400.3.8.1"/>
  <changelog author="lubos.kocman@suse.com" date="1654516800">- Add registry.suse.com as agreed on oSC22
  Let's advertise usage of BCI images in general</changelog>
  <changelog author="rbrown@suse.com" date="1654689600">- Add missing comma to previous change</changelog>
  <changelog author="dcermak@suse.com" date="1655208000">- Add missing Requires(post): sed, fixes boo#1200524
- Make %post compatible with dash</changelog>
  <changelog author="fvogt@suse.com" date="1655294400">- Use $() again in %post, but with a space for POSIX compliance</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Resync containers.conf / storage.conf with Fedora
- Create /etc/containers/registries.conf.d and
  add 000-shortnames.conf to it.</changelog>
  <changelog author="fvogt@suse.com" date="1660046400">- Fix obvious typo in containers.conf</changelog>
  <changelog author="dmueller@suse.com" date="1666699200">- set detached sigstore attachments for the SUSE controlled registries</changelog>
  <changelog author="dmueller@suse.com" date="1668081600">- postinstall script: slight cleanup, no functional change</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- add container-storage-driver.sh (bsc#1197093)</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
</package>
<package pkgid="ea4cde5f8256aada1128cdea9efe989e4e172d6df2ffee47986c9590cc8f57e2" name="libcpupower0" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150400.3.3.1"/>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1674129600">- Originally by aabdallah@suse.com:
  Don't exist if perf is unavailable.
  * Fix for SG#64023, bsc#1202890:
  A turbostat-Dont-exist-if-perf-is-unavailable.patch:</changelog>
</package>
<package pkgid="becdfb293e945f7b121aac29c1f01f01251e3fd0378ac53719a82f8f14759bb2" name="libcpupower0" arch="s390x">
  <version epoch="0" ver="5.14" rel="150400.3.3.1"/>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1674129600">- Originally by aabdallah@suse.com:
  Don't exist if perf is unavailable.
  * Fix for SG#64023, bsc#1202890:
  A turbostat-Dont-exist-if-perf-is-unavailable.patch:</changelog>
</package>
<package pkgid="777b62b4db8322e40ff75a07dab149322a66fac0ffca19bf43853b82f8848a8b" name="libcpupower0" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150400.3.3.1"/>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1674129600">- Originally by aabdallah@suse.com:
  Don't exist if perf is unavailable.
  * Fix for SG#64023, bsc#1202890:
  A turbostat-Dont-exist-if-perf-is-unavailable.patch:</changelog>
</package>
<package pkgid="d52105a97c3df76d9e2368371d9c48a4212affe4c5fcaee21f0db615997a27f7" name="libcups2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="bee2fb4c6dfa30c58e2d79e4810229a5081e410de7fffb19398f88b5606d53a9" name="libcups2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="52107b8f76a0db6a33611457f2e08a15b3559e6fc9e2ab4d7ab3c7284899b138" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="3b5aca13d4fee017a71a0d697f9626cc8be2624a86f5993157e9bf9a3f01c029" name="libcups2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="e283fe31aa231f0475ee66c01de149fa0f7bcc9fbf3a3637a2c58ee4bba064fd" name="libcups2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="565b915bfe1afd29709909b5f8ef360c2ddcdbb74b586f6549d4f97d43012dc8" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="f2eadc1832aaf797377c18f7cc795c543a1409c76dfc4ff1ac6221e8cdac19e1" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="083083b811a02da47886e400618876296e4b181cdea7c7f8711f53684045c4fc" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="d85d1f769699983521df183cacc1e5db735a091b71e91401685b245eeaa9fd14" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="32dee8e5faf0576db6db2c93c5aafc022de5c1d7c2035eee4067bc56008d9cf2" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="953b722cbfb66d87a986f1737342b2a8ddc95dbd1b6d4578528c37dccc2909ee" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="25880aecf9cdf7d8d4c40af793eea5dffcbd60ab112152a01bf587ea27ee71ac" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="d845b6ff41c0f6cd3f8560481541e3b9bdcd1e85c42f227384f639ef4af2ec2e" name="libdbus-1-3" arch="aarch64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="d0d8e7e1164e22f10000775724bd2ab235836a937474d270b6828882de362c24" name="libdbus-1-3" arch="s390x">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="2f427f6baf98a10fdfb249e2b4ba5423a5134a32692ed7d619e52cf47998843b" name="libdbus-1-3" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="5e0628842724620ae49ecd299ea3189855de1ca6acd76dd694db0239149f8410" name="libefa1" arch="aarch64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="4f69611bbbb93363bb2bb9d995ece1fb46dcff64c309f440f1908dfa41089733" name="libefa1" arch="s390x">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="1e4fd9de29100d721cdb9a24e767cfdf2aa49b3b34592e5d792920c387bd2012" name="libefa1" arch="x86_64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="68a683eff9680126a2e3086164c63f285befee53d5a1a09b2d883bec51f54eb8" name="libekmfweb1" arch="s390x">
  <version epoch="0" ver="2.19.0" rel="150400.7.21.1"/>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183810)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183810.</changelog>
  <changelog author="mpost@suse.com" date="1620302400">- Modified s390-tools-sles15-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)
- Modified s390-tools-sles15-Implement-f-for-backwards-compability.patch
  to have the correct offset for hunk #2 to apply without warnings.</changelog>
  <changelog author="mpost@suse.com" date="1622030400">- Modified the following patches to correct the output from the
  dasdfmt command when *not* using "YaST mode." (bsc#1182816, bsc#1182820)
  * s390-tools-sles15sp3-Format-devices-in-parallel.patch
  * s390-tools-sles15sp3-Implement-Y-yast_mode.patch</changelog>
  <changelog author="mpost@suse.com" date="1624017600">- Reworked s390-tools-sles15sp2-Implement-Y-yast_mode.patch (yet
  again). If more DASD volumes are to be formatted than are allowed
  by the "maximum number to do in parallel" parameter, dasdfmt
  waits until one of the child processes ends before starting another.
  For YaST to be able to figure out how many cylinders a particular
  DASD volume has, that information has to be output for _all_ of the
  volumes, before any of the child processes are spawned.
  (bsc#1187012)</changelog>
  <changelog author="mpost@suse.com" date="1634558400">- Updated the spec file to correspond to the changes made to the
  location and name of the kernel image in the kernel-zfcpdump
  package (bsc#1189841)
- Did some spec file cleanup based on the recommendations from
  spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1636718400">- Added s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
  Reading /sys/kernel/mm/page_idle/bitmap can cause hang up on
  reading offline pages. (bsc#1192599)
- Added %{version} to the Requires: libekmfweb1 for the
  libekmfweb1-devel package.</changelog>
  <changelog author="mpost@suse.com" date="1641988800">- Upgraded to version 2.19.0 (jsc#SLE-18324)
  * v2.19.0 (2021-11-10)__
    Add new tools / libraries:
  - chreipl-fcp-mpath: New toolset that uses multipath information to change
    the configured FCP re-IPL path on detecting issues with the current path
    Changes of existing tools:
  - dbginfo.sh: Add retry timeout and remove possible blocking "blockdev --report"
  - dbginfo.sh: Collect config- and debug-data for chreipl-fcp-mpath
  - hsci: Add support for multiple MAC addresses
    Bug Fixes:
  - lshwc: Fix compile error for gcc &lt;8.1
  - zdump: Various clean-ups and fixes
  - ziomon: Correct throughput calculation in ziorep_printers
  - zipl: Fix segmentation fault when setting stage3_parms
  * v2.18.0 (2021-10-01)__
    Add new tools:
  - scripts: Add tool for parsing sclp s390dbf logs
  - zdev: Add udev rule helper tool
  - zipl-editenv: Add tool to operate with zIPL environment installed in the boot record
    Changes of existing tools:
  - Makefile: Fix order of build of libraries for parallel builds
  - dbginfo.sh: Add collection in area of timedate, coredump and --check option
  - dbginfo.sh: Add exception on dump2tar for /sys/kernel/mm/page_idle/bitmap
  - dbginfo.sh: Cleanup of outdated sections and general code rework
  - dbginfo.sh: Collect zipl boot menu entries from boot loader specification
  - lszcrypt: Add support for vfio-ap status field
  - lszcrypt: Improved output for deconfig cards and queues
  - lszfcp: Add linkdown case to host marker of extended output
  - zdev: Add auto-config for PCI and crypto devices
  - zdump: Introduce multi-level message logging
  - zipl: Add support for environment block interpretation
  - zkey-cryptsetup: Support LUKS2 volumes with integrity support enabled
    Bug Fixes:
  - hsavmcore: Avoid recompilation of overlay during install step
  - libkmipclient: Fix parsing of hex values for XML and JSON encoding
  - vmur/vmur.cpp: Fix error handling on transfer failure
  - zdump: Lots of smaller fixes across the board
  * v2.17.0 (2021-07-07)__
    Add new tools / libraries:
  - hsavmcore: New utility to make the dump process with kdump more efficient
  - libkmipclient: Add KMIP client shared library
  - libseckey: Add a secure key library
  - lshwc: New tool to extract and list complete counter sets
    Changes of existing tools:
  - genprotimg: Add '--(enable|disable)-pckmo' options
  - genprotimg: Add OpenSSL 3.0 support
  - genprotimg: Change plaintext control flags defaults so PCKMO functions are allowed
  - libutil: Introduce multi-level message logging (util_log)
  - libutil: Introduce util_arch module
  - udev/dasd: Change DASD udev-rule to set none scheduler
  - zdsfs: Add transparent codepage conversion
  - zkey: Add support for KMIP-based key management systems
    Bug Fixes:
  - ttyrun-getty: Avoid conflicts with serial-getty@
  - dbginfo: add /proc/kallsyms - refresh zVM, lscpu - fix WORKARCHIVE handling
  - dbginfo: add KVM data collection for server and guest - fix lszdev
  - genprotimg: Add missing return values in error paths
  - zkey: Fix conversion of CCA DATA keys to CCA CIPHER keys
  - znetconf: avoid conflict with "chzdev -e"
  * v2.16.0 (2021-02-19)__
    Add new tool:
  - hsci: New tool to manage HSCI (HiperSockets Converged Interfaces)
    Changes of existing tools:
  - genprotimg: Add host-key document verification support
  - genprotimg: boot: Make boot loader -march=z900 compatible
  - libekmfweb: Make install directory for shared libraries configurable
  - lsdasd: Add FC Endpoint Security information
  - make: Add address sanitizer support
  - netboot: Add version information to scripts
  - netboot: Bump busybox version in pxelinux.0 build
  - zdev: Add FC Endpoint Security information for DASD devices
  - zdev: Add build option to update initial RAM-disk by default
  - zkey-ekmfweb: Avoid sequence number clash when generating keys
  - zkey/zkey-ekmfweb: Install KMS plugins into configurable location
  - zkey: Add support to store LUKS2 dummy passphrase in key repository
    Bug Fixes:
  - dasdfmt: Fix segfault when an incorrect option is specified
  - genprotimg: Fix several build issues
  - genprotimg: Require argument for 'ramdisk' and 'parmfile' options
  - zcryptstats: Fix handling of partial results with many domains
  - zfcpdbf: Deal with crash 7.2.9 change in caller name formatting
  - zipl/boot: Fix memory use after free in stage2
  - zipl/boot: Fix potential heap overflow in stage2
  - zipl: Fix reading 4k disk's geometry
- Added the following two IBM patches:
  * s390-tools-sles15sp4-chreipl-fcp-mpath-don-t-compress-the-manpage-before-.patch
  * s390-tools-sles15sp4-chreipl-fcp-mpath-remove-shebang-from-chreipl-fcp-mp.patch
- Removed the following obsolete patches
  * s390-tools-sles15sp3-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
  * s390-tools-sles15sp3-libutil-Compare-proc-entries-to-vfstype.patch
  * s390-tools-sles15sp3-01-zdev-Add-FC-Endpoint-Security-information-for-DASD-d.patch
  * s390-tools-sles15sp3-02-lsdasd-Add-FC-Endpoint-Security-information.patch
  * s390-tools-sles15sp3-hsci-Add-new-tool-to-control-HiperSockets-Converged-.patch
  * s390-tools-sles15sp3-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  * s390-tools-sles15sp3-01-genprotimg-abort-if-one-of-the-recursive-targets-is-.patch
  * s390-tools-sles15sp3-02-genprotimg-fix-two-memory-leaks.patch
  * s390-tools-sles15sp3-03-genprotimg-require-argument-for-ramdisk-and-parmfile.patch
  * s390-tools-sles15sp3-04-genprotimg-add-host-key-document-verification-suppor.patch
  * s390-tools-sles15sp3-zkey-Fix-APQN-property-names.patch
  * s390-tools-sles15sp3-zipl-fix-4k-scsi-ipl.patch
  * s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  * s390-tools-sles15sp3-check-return-code-from-util_file_read_l.patch
  * s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
- Removed an obsolete "export ROOT_BUILD_DIR" statement from the spec file.
- Removed unnecessary defattr statements in the files section.</changelog>
  <changelog author="mpost@suse.com" date="1645531200">- Added s390-tools-sles15sp4-zdev-modify-the-lsblk-output-parser-in-lszdev.patch
  for bsc#1196255. Version 2.37+ of util-linux modified the output
  characters of lsblk,which breaks the parser function.
- Added s390-tools-sles15sp4-zdev-Fix-path-resolution-for-multi-mount-point-file-.patch
  for bsc#1196254. Path resolution fails when a device provides
  multiple mount points such as, for example, when using btrfs
  subvolumes, or when mounting the same file system at multiple
  mount points.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files into %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mpost@suse.com" date="1649678400">- Added the following patches for bsc#1198285:
  s390-tools-sles15sp4-01-genprotimg-remove-DigiCert-root-CA-pinning.patch
  s390-tools-sles15sp4-02-genprotimg-check_hostkeydoc-relax-default-issuer-che.patch
  The certificate verification of check_hostkeydoc is too strict and
  doesn't match the checking performed by genprotimg.
- Added the following patch for bsc#1198284:
  s390-tools-sles15sp4-libseckey-Fix-re-enciphering-of-EP11-secure-key.patch
  When re-enciphering the identity key and/or wrapping key of the
  zkey KMIP plugin via 'zkey kms reencipher', the operation
  completes without an error, but the secure keys are left
  un-reenciphered.</changelog>
  <changelog author="mpost@suse.com" date="1649937600">- Updated the cputype script to include the model number of IBM's
  recently announced z16 processor.</changelog>
  <changelog author="mpost@suse.com" date="1651579200">- Added s390-tools-sles15sp4-zdump-fix-segfault-due-to-double-free.patch
  for bsc#1199128. zgetdump --info may lead to a core dump when
  issued for the device node (not a partition) right after
  installing multi-volume dump tool (without taking actual dump).</changelog>
  <changelog author="mpost@suse.com" date="1653566400">- Added s390-tools-sles15sp4-libseckey-Adapt-keymgmt_match-implementation-to-Open.patch
  for bsc#1199649. zkey: KMIP plugin fails to connection to KMIP server
  When a zkey key repository is bound to the KMIP plugin, and the
  connection to the KMIP server is to be configired using command
  'zkey kms configure --kmip-server &lt;server&gt;', it fails to connect
  to the specified KMIP server.</changelog>
  <changelog author="mpost@suse.com" date="1654171200">- Added s390-tools-sles15sp4-genprotimg-boot-disable-Warray-bounds-for-now.patch
  to fix a build failure with gcc12. With gcc12, a "false positive"
  of "array subscript 0 is outside array bounds" is seen in
  genprotimg/boot/stage3a.c (bsc#1200131).</changelog>
  <changelog author="mpost@suse.com" date="1658145600">- Added s390-tools-sles15sp4-hyptop-increase-initial-update-interval.patch
  for bsc#1201412. Initial iteration of hyptop can produce bloated values
  independent from the update delay set by the user.</changelog>
  <changelog author="mpost@suse.com" date="1667476800">- Added s390-tools-sles15sp4-zipl-boot-add-secure-boot-trailer.patch
  for bsc#1204965. New IBM Z firmware requires all signed boot
  images to contain a trailing data block with a specific format.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1672747200">-  Added the following patches for
  KVM: Secure Execution Attestation Userspace Tool (s390-tools)
  (jsc#SLE-24831, jsc#SLE-22854, bsc#1206706)
  * s390-tools-sles15sp4-libpv-New-library-for-PV-tools.patch
  * s390-tools-sles15sp4-pvattest-tools-Add-tool-for-attestation.patch
  * s390-tools-sles15sp4-pvattest-Improve-error-reporting.patch
  * s390-tools-sles15sp4-pvattest-Create-perform-and-verify-attestation-measu.patch
  * s390-tools-sles15sp4-pvattest-Improve-logging.patch
  * s390-tools-sles15sp4-pvattest-Add-more-information-to-verbose-logging.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1674475200">- Added the following patches for bsc#1207175, jsc#SLE-2285, and
  ECO jsc#SLE-24835:
  ap_tools: add ap-check and the ap device type to zdev. This
  feature adds multiple components in support of persistent
  configuration of vfio-ap mediated devices.
  * s390-tools-sles15sp4-01-libutil-add-util_exit_code.patch
  * s390-tools-sles15sp4-02-libutil-Move-some-zdev-file-reading-functions-into-u.patch
  * s390-tools-sles15sp4-03-libutil-Introduce-util_udev.patch
  * s390-tools-sles15sp4-04-libap-Add-library-for-ap-vfio-ap-management-tools.patch
  * s390-tools-sles15sp4-05-ap_tools-Introduce-ap_tools-and-the-ap-check-tool.patch
  * s390-tools-sles15sp4-06-zdev-Introduce-the-ap-device-type.patch
  * s390-tools-sles15sp4-07-libutil-introduce-util_lockfile.patch
  * s390-tools-sles15sp4-08-libutil-add-example-for-util_lockfile.patch
  * s390-tools-sles15sp4-09-libap-use-util_lockfile-and-remove-liblockfile-depen.patch
  * s390-tools-sles15sp4-10-ap_tools-ap-check-use-new-mdevctl-install-location.patch
  * s390-tools-sles15sp4-11-util_lockfile-fix-includes.patch
- Updated the spec file to:
  * Add %dir entries for:
    %{_sysconfdir}/mdevctl.d
    %{_sysconfdir}/mdevctl.d/scripts.d
    %{_sysconfdir}/mdevctl.d/scripts.d/callouts
    %{_prefix}/lib/mdevctl,
    %{_prefix}/lib/mdevctl/scripts.d, and
    %{_prefix}/lib/mdevctl/scripts.d/callouts
    NOTE that these directories do not belong to this package, but
    the mdevctl package has yet to be updated to claim them. So,
    until that happens, we have to temporarily claim ownership of
    them for the s390-tools package to build.
  * Modify the find/grep commands that generate the list of files
    for the package to avoid having files listed more than once.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678449600">- Added the folowing patches (bsc#1209002, and bsc#1209003)
  - Fixes vmcp buffer evalutaion
  * s390-tools-sles15sp4-dbginfo.sh-fix_vmcp_buffer.patch
  - Adds support for kubernetes data collection
  * s390-tools-sles15sp4-dbginfo.sh-add_kubernetes.patch
- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
  when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1684324800">- Applied patches (bsc#1211318)
  * s390-tools-sles15sp4-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp4-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
</package>
<package pkgid="a3ec73fc3f4ef27f33581b25333c445259e9a0870e998725d6e810ff6c384c3f" name="libfdisk1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="2376e584cb5c2d55e2fda099cbb431e6e85cb6e4a2538672bee464ff673cc987" name="libfdisk1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="6746b29c126d11a5a08622e5d0038aa01a730bc50c98f079d5c0e78667dd1d7a" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="39fcd4f0ff1dcc16d07bcfa94fc8657c8745dc1b1b32afbbef1394118acb4c39" name="libfido2-1" arch="aarch64">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="4d968c470af88d0d46b30ffefe4547857e1864f3f0a691b8033da07b86591c93" name="libfido2-1" arch="s390x">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="e3549cc9533144a279bd5f755a862a4ab4ce7de719ab520e2d24563063f3418f" name="libfido2-1" arch="x86_64">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="78efcf0dd16dd652f30d7585eac241f4c0dc40aa84254ccf098483b7e258f0ee" name="libfido2" arch="src">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="5192e74aafc79fb2161d930446952a8338a4641f0f5def153d503d6f8a1a39a2" name="libfido2-udev" arch="noarch">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="129b0c07d2f88327d1c8d77524170e2f7354bbe7ab6dac33a9d3dbbd29390241" name="libfreebl3" arch="aarch64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="c457d51596668b34aaaf6659be0f1c6e261615d58fcf880c16d95c07cf706b5c" name="libfreebl3" arch="s390x">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="9b941048b0ba744d97bbc7c89daf16bef87a2f8bc131e709834f06a01cc2ff17" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="a514d87a7e98a22db3af92ccc6962faeea8ed5f1cde5ad8c855b5ae18a0d64af" name="libfreebl3" arch="aarch64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="ab3a13835238a5443b1349d00bf3f508ff55c0f7032b785bc767b90921db8aef" name="libfreebl3" arch="s390x">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="149cfaf65f0a214826359faa93e0db7dbc77f703a203525fe00dd1d7f905f9c3" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="ca4aa6a1cf07685a1aad88eeeecf955da71dc165044c8d6f2c867e4237025618" name="libfreebl3-hmac" arch="aarch64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="787a03a80f0d3afa079ede1a55d85461c7fcb7f936b4a2c004986dc3f8f717d6" name="libfreebl3-hmac" arch="s390x">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="f35223c7b9d11712aeb485e8a315508587fad446bde2bd8d3007d1f5272f772c" name="libfreebl3-hmac" arch="x86_64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="039376ad4e85952670bf5525f8a25259c35291a5dc6f64947fcfcee0860e4baa" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="70a0a6a372f61785eee95be8d77a9c595076e6644872c5f0857d75bda3def0ca" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="eea10abfaf64e116455d7a85ebb345dbd7f36d1750ffc4fa17dfe06e4432beb8" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="7db6d9a4645dc12a6f7d56b961503ace54fb3e961f366651f0aa746f84e0c342" name="libgcrypt" arch="src">
  <version epoch="0" ver="1.9.4" rel="150400.6.8.1"/>
  <changelog author="pmonreal@suse.com" date="1632225600">- FIPS: Enable hardware support also in FIPS mode [bsc#1187110]
  * Add libgcrypt-FIPS-hw-optimizations.patch
  * Upstream task: https://dev.gnupg.org/T5508</changelog>
  <changelog author="pmonreal@suse.com" date="1632225601">- FIPS: Provide a module name/identifier and version that can be
  mapped to the validation records. [bsc#1190706]
  * Add libgcrypt-FIPS-module-version.patch
  * Upstream task: https://dev.gnupg.org/T5600</changelog>
  <changelog author="pmonreal@suse.com" date="1635422400">- FIPS: Fix regression tests in FIPS mode [bsc#1192131]
  * Add libgcrypt-FIPS-fix-regression-tests.patch
  * Upstream task: https://dev.gnupg.org/T5520</changelog>
  <changelog author="pmonreal@suse.com" date="1635854400">- FIPS: PBKDF requirements [bsc#1185137]
  * The PBKDF2 selftests were introduced in libgcrypt version
    1.9.1 in the function selftest_pbkdf2()
  * Upstream task: https://dev.gnupg.org/T5182</changelog>
  <changelog author="pmonreal@suse.com" date="1636372800">- FIPS: Disable 3DES/Triple-DES in FIPS mode [bsc#1185138]
  * Add libgcrypt-FIPS-disable-3DES.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1637928000">- FIPS: RSA KeyGen/SigGen fail with 4096 bit key sizes [bsc#1192240]
  * rsa: Check RSA keylen constraints for key operations.
  * rsa: Fix regression in not returning an error for prime generation.
  * tests: Add 2k RSA key working in FIPS mode.
  * tests: pubkey: Replace RSA key to one of 2k.
  * tests: pkcs1v2: Skip tests with small keys in FIPS.
  * Add patches:
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1638273600">- FIPS: Define an entropy source SP800-90B compliant [bsc#1185140]
  * Disable jitter entropy by default in random.conf
  * Disable only-urandom option by default in random.conf</changelog>
  <changelog author="pmonreal@suse.com" date="1638878400">- FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
  * gcry_mpi_sub_ui: fix subtracting from negative value
  * Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1642593600">- FIPS: Service level indicator [bsc#1190700]
  * Provide an indicator to check wether the service utilizes an
    approved cryptographic algorithm or not.
  * Add patches:
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1643716800">- FIPS: Disable DSA in FIPS mode [bsc#1195385]
  * Upstream task: https://dev.gnupg.org/T5710
  * Add libgcrypt-FIPS-disable-DSA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647950400">- FIPS: Implement a service indicator for asymmetric ciphers [bsc#1190700]
  * Mark RSA public key encryption and private key decryption with
    padding (e.g. OAEP, PKCS) as non-approved since RSA-OAEP lacks
    peer key assurance validation requirements per SP800-56Brev2.
  * Mark ECC as approved only for NIST curves P-224, P-256, P-384
    and P-521 with check for common NIST names and aliases.
  * Mark DSA, ELG, EDDSA, ECDSA and ECDH as non-approved.
  * Add libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt-FIPS-service-indicators.patch
- Run the regression tests also in FIPS mode.
  * Disable tests for non-FIPS approved algos.
  * Rebase: libgcrypt-FIPS-verify-unsupported-KDF-test.patch</changelog>
  <changelog author="dennis.knorr@suse.com" date="1649937600">- FIPS: extend the service indicator [bsc#1190700]
  * introduced a pk indicator function
  * adapted the approved and non approved ciphersuites
  * Add libgcrypt_indicators_changes.patch
  * Add libgcrypt-indicate-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port libgcrypt to use jitterentropy [bsc#1202117, jsc#SLE-24941]
  * Enable the jitter based entropy generator by default in random.conf
  - Add libgcrypt-jitterentropy-3.3.0.patch
  * Update the internal jitterentropy to version 3.4.0
  - Add libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661256000">- FIPS: gpg/gpg2 gets out of core handler in FIPS mode while
  typing Tab key to Auto-Completion. [bsc#1182983]
  * Add libgcrypt-out-of-core-handler.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662552000">- FIPS: Zeroize buffer and digest in check_binary_integrity()
  * Add libgcrypt-FIPS-Zeroize-hmac.patch [bsc#1191020]</changelog>
  <changelog author="pmonreal@suse.com" date="1662552001">- FIPS: Check keylength in gcry_fips_indicator_kdf() [bsc#1190700]
  * Consider approved keylength greater or equal to 112 bits.
  * Add libgcrypt-FIPS-kdf-leylength.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677931200">- FIPS: PBKDF2: Add additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  fips indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
  * Add libgcrypt-FIPS-pkdf2-Additional-checks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104000">- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
  * Add libgcrypt-FIPS-ECC-disallow-skip-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104001">- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
  * Add libgcrypt-FIPS-ECC-PCT-Add-transition-to-error.patch</changelog>
</package>
<package pkgid="ee0d62001ca3e6b2733a11d817f2bbcdbc0700a6fe024b43a5fe0df77c95c6b3" name="libgcrypt20" arch="aarch64">
  <version epoch="0" ver="1.9.4" rel="150400.6.8.1"/>
  <changelog author="pmonreal@suse.com" date="1632225600">- FIPS: Enable hardware support also in FIPS mode [bsc#1187110]
  * Add libgcrypt-FIPS-hw-optimizations.patch
  * Upstream task: https://dev.gnupg.org/T5508</changelog>
  <changelog author="pmonreal@suse.com" date="1632225601">- FIPS: Provide a module name/identifier and version that can be
  mapped to the validation records. [bsc#1190706]
  * Add libgcrypt-FIPS-module-version.patch
  * Upstream task: https://dev.gnupg.org/T5600</changelog>
  <changelog author="pmonreal@suse.com" date="1635422400">- FIPS: Fix regression tests in FIPS mode [bsc#1192131]
  * Add libgcrypt-FIPS-fix-regression-tests.patch
  * Upstream task: https://dev.gnupg.org/T5520</changelog>
  <changelog author="pmonreal@suse.com" date="1635854400">- FIPS: PBKDF requirements [bsc#1185137]
  * The PBKDF2 selftests were introduced in libgcrypt version
    1.9.1 in the function selftest_pbkdf2()
  * Upstream task: https://dev.gnupg.org/T5182</changelog>
  <changelog author="pmonreal@suse.com" date="1636372800">- FIPS: Disable 3DES/Triple-DES in FIPS mode [bsc#1185138]
  * Add libgcrypt-FIPS-disable-3DES.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1637928000">- FIPS: RSA KeyGen/SigGen fail with 4096 bit key sizes [bsc#1192240]
  * rsa: Check RSA keylen constraints for key operations.
  * rsa: Fix regression in not returning an error for prime generation.
  * tests: Add 2k RSA key working in FIPS mode.
  * tests: pubkey: Replace RSA key to one of 2k.
  * tests: pkcs1v2: Skip tests with small keys in FIPS.
  * Add patches:
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1638273600">- FIPS: Define an entropy source SP800-90B compliant [bsc#1185140]
  * Disable jitter entropy by default in random.conf
  * Disable only-urandom option by default in random.conf</changelog>
  <changelog author="pmonreal@suse.com" date="1638878400">- FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
  * gcry_mpi_sub_ui: fix subtracting from negative value
  * Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1642593600">- FIPS: Service level indicator [bsc#1190700]
  * Provide an indicator to check wether the service utilizes an
    approved cryptographic algorithm or not.
  * Add patches:
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1643716800">- FIPS: Disable DSA in FIPS mode [bsc#1195385]
  * Upstream task: https://dev.gnupg.org/T5710
  * Add libgcrypt-FIPS-disable-DSA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647950400">- FIPS: Implement a service indicator for asymmetric ciphers [bsc#1190700]
  * Mark RSA public key encryption and private key decryption with
    padding (e.g. OAEP, PKCS) as non-approved since RSA-OAEP lacks
    peer key assurance validation requirements per SP800-56Brev2.
  * Mark ECC as approved only for NIST curves P-224, P-256, P-384
    and P-521 with check for common NIST names and aliases.
  * Mark DSA, ELG, EDDSA, ECDSA and ECDH as non-approved.
  * Add libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt-FIPS-service-indicators.patch
- Run the regression tests also in FIPS mode.
  * Disable tests for non-FIPS approved algos.
  * Rebase: libgcrypt-FIPS-verify-unsupported-KDF-test.patch</changelog>
  <changelog author="dennis.knorr@suse.com" date="1649937600">- FIPS: extend the service indicator [bsc#1190700]
  * introduced a pk indicator function
  * adapted the approved and non approved ciphersuites
  * Add libgcrypt_indicators_changes.patch
  * Add libgcrypt-indicate-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port libgcrypt to use jitterentropy [bsc#1202117, jsc#SLE-24941]
  * Enable the jitter based entropy generator by default in random.conf
  - Add libgcrypt-jitterentropy-3.3.0.patch
  * Update the internal jitterentropy to version 3.4.0
  - Add libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661256000">- FIPS: gpg/gpg2 gets out of core handler in FIPS mode while
  typing Tab key to Auto-Completion. [bsc#1182983]
  * Add libgcrypt-out-of-core-handler.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662552000">- FIPS: Zeroize buffer and digest in check_binary_integrity()
  * Add libgcrypt-FIPS-Zeroize-hmac.patch [bsc#1191020]</changelog>
  <changelog author="pmonreal@suse.com" date="1662552001">- FIPS: Check keylength in gcry_fips_indicator_kdf() [bsc#1190700]
  * Consider approved keylength greater or equal to 112 bits.
  * Add libgcrypt-FIPS-kdf-leylength.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677931200">- FIPS: PBKDF2: Add additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  fips indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
  * Add libgcrypt-FIPS-pkdf2-Additional-checks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104000">- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
  * Add libgcrypt-FIPS-ECC-disallow-skip-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104001">- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
  * Add libgcrypt-FIPS-ECC-PCT-Add-transition-to-error.patch</changelog>
</package>
<package pkgid="806ad60d5ea88d0f47513e5c065961ff501cad6a60abdb8e8e36a758523f40d3" name="libgcrypt20" arch="s390x">
  <version epoch="0" ver="1.9.4" rel="150400.6.8.1"/>
  <changelog author="pmonreal@suse.com" date="1632225600">- FIPS: Enable hardware support also in FIPS mode [bsc#1187110]
  * Add libgcrypt-FIPS-hw-optimizations.patch
  * Upstream task: https://dev.gnupg.org/T5508</changelog>
  <changelog author="pmonreal@suse.com" date="1632225601">- FIPS: Provide a module name/identifier and version that can be
  mapped to the validation records. [bsc#1190706]
  * Add libgcrypt-FIPS-module-version.patch
  * Upstream task: https://dev.gnupg.org/T5600</changelog>
  <changelog author="pmonreal@suse.com" date="1635422400">- FIPS: Fix regression tests in FIPS mode [bsc#1192131]
  * Add libgcrypt-FIPS-fix-regression-tests.patch
  * Upstream task: https://dev.gnupg.org/T5520</changelog>
  <changelog author="pmonreal@suse.com" date="1635854400">- FIPS: PBKDF requirements [bsc#1185137]
  * The PBKDF2 selftests were introduced in libgcrypt version
    1.9.1 in the function selftest_pbkdf2()
  * Upstream task: https://dev.gnupg.org/T5182</changelog>
  <changelog author="pmonreal@suse.com" date="1636372800">- FIPS: Disable 3DES/Triple-DES in FIPS mode [bsc#1185138]
  * Add libgcrypt-FIPS-disable-3DES.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1637928000">- FIPS: RSA KeyGen/SigGen fail with 4096 bit key sizes [bsc#1192240]
  * rsa: Check RSA keylen constraints for key operations.
  * rsa: Fix regression in not returning an error for prime generation.
  * tests: Add 2k RSA key working in FIPS mode.
  * tests: pubkey: Replace RSA key to one of 2k.
  * tests: pkcs1v2: Skip tests with small keys in FIPS.
  * Add patches:
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1638273600">- FIPS: Define an entropy source SP800-90B compliant [bsc#1185140]
  * Disable jitter entropy by default in random.conf
  * Disable only-urandom option by default in random.conf</changelog>
  <changelog author="pmonreal@suse.com" date="1638878400">- FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
  * gcry_mpi_sub_ui: fix subtracting from negative value
  * Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1642593600">- FIPS: Service level indicator [bsc#1190700]
  * Provide an indicator to check wether the service utilizes an
    approved cryptographic algorithm or not.
  * Add patches:
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1643716800">- FIPS: Disable DSA in FIPS mode [bsc#1195385]
  * Upstream task: https://dev.gnupg.org/T5710
  * Add libgcrypt-FIPS-disable-DSA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647950400">- FIPS: Implement a service indicator for asymmetric ciphers [bsc#1190700]
  * Mark RSA public key encryption and private key decryption with
    padding (e.g. OAEP, PKCS) as non-approved since RSA-OAEP lacks
    peer key assurance validation requirements per SP800-56Brev2.
  * Mark ECC as approved only for NIST curves P-224, P-256, P-384
    and P-521 with check for common NIST names and aliases.
  * Mark DSA, ELG, EDDSA, ECDSA and ECDH as non-approved.
  * Add libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt-FIPS-service-indicators.patch
- Run the regression tests also in FIPS mode.
  * Disable tests for non-FIPS approved algos.
  * Rebase: libgcrypt-FIPS-verify-unsupported-KDF-test.patch</changelog>
  <changelog author="dennis.knorr@suse.com" date="1649937600">- FIPS: extend the service indicator [bsc#1190700]
  * introduced a pk indicator function
  * adapted the approved and non approved ciphersuites
  * Add libgcrypt_indicators_changes.patch
  * Add libgcrypt-indicate-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port libgcrypt to use jitterentropy [bsc#1202117, jsc#SLE-24941]
  * Enable the jitter based entropy generator by default in random.conf
  - Add libgcrypt-jitterentropy-3.3.0.patch
  * Update the internal jitterentropy to version 3.4.0
  - Add libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661256000">- FIPS: gpg/gpg2 gets out of core handler in FIPS mode while
  typing Tab key to Auto-Completion. [bsc#1182983]
  * Add libgcrypt-out-of-core-handler.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662552000">- FIPS: Zeroize buffer and digest in check_binary_integrity()
  * Add libgcrypt-FIPS-Zeroize-hmac.patch [bsc#1191020]</changelog>
  <changelog author="pmonreal@suse.com" date="1662552001">- FIPS: Check keylength in gcry_fips_indicator_kdf() [bsc#1190700]
  * Consider approved keylength greater or equal to 112 bits.
  * Add libgcrypt-FIPS-kdf-leylength.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677931200">- FIPS: PBKDF2: Add additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  fips indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
  * Add libgcrypt-FIPS-pkdf2-Additional-checks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104000">- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
  * Add libgcrypt-FIPS-ECC-disallow-skip-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104001">- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
  * Add libgcrypt-FIPS-ECC-PCT-Add-transition-to-error.patch</changelog>
</package>
<package pkgid="b3baf7ef331f97881e854d6edd73923b4dac1b0b3b08705e052772e83358d730" name="libgcrypt20" arch="x86_64">
  <version epoch="0" ver="1.9.4" rel="150400.6.8.1"/>
  <changelog author="pmonreal@suse.com" date="1632225600">- FIPS: Enable hardware support also in FIPS mode [bsc#1187110]
  * Add libgcrypt-FIPS-hw-optimizations.patch
  * Upstream task: https://dev.gnupg.org/T5508</changelog>
  <changelog author="pmonreal@suse.com" date="1632225601">- FIPS: Provide a module name/identifier and version that can be
  mapped to the validation records. [bsc#1190706]
  * Add libgcrypt-FIPS-module-version.patch
  * Upstream task: https://dev.gnupg.org/T5600</changelog>
  <changelog author="pmonreal@suse.com" date="1635422400">- FIPS: Fix regression tests in FIPS mode [bsc#1192131]
  * Add libgcrypt-FIPS-fix-regression-tests.patch
  * Upstream task: https://dev.gnupg.org/T5520</changelog>
  <changelog author="pmonreal@suse.com" date="1635854400">- FIPS: PBKDF requirements [bsc#1185137]
  * The PBKDF2 selftests were introduced in libgcrypt version
    1.9.1 in the function selftest_pbkdf2()
  * Upstream task: https://dev.gnupg.org/T5182</changelog>
  <changelog author="pmonreal@suse.com" date="1636372800">- FIPS: Disable 3DES/Triple-DES in FIPS mode [bsc#1185138]
  * Add libgcrypt-FIPS-disable-3DES.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1637928000">- FIPS: RSA KeyGen/SigGen fail with 4096 bit key sizes [bsc#1192240]
  * rsa: Check RSA keylen constraints for key operations.
  * rsa: Fix regression in not returning an error for prime generation.
  * tests: Add 2k RSA key working in FIPS mode.
  * tests: pubkey: Replace RSA key to one of 2k.
  * tests: pkcs1v2: Skip tests with small keys in FIPS.
  * Add patches:
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1638273600">- FIPS: Define an entropy source SP800-90B compliant [bsc#1185140]
  * Disable jitter entropy by default in random.conf
  * Disable only-urandom option by default in random.conf</changelog>
  <changelog author="pmonreal@suse.com" date="1638878400">- FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
  * gcry_mpi_sub_ui: fix subtracting from negative value
  * Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1642593600">- FIPS: Service level indicator [bsc#1190700]
  * Provide an indicator to check wether the service utilizes an
    approved cryptographic algorithm or not.
  * Add patches:
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1643716800">- FIPS: Disable DSA in FIPS mode [bsc#1195385]
  * Upstream task: https://dev.gnupg.org/T5710
  * Add libgcrypt-FIPS-disable-DSA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647950400">- FIPS: Implement a service indicator for asymmetric ciphers [bsc#1190700]
  * Mark RSA public key encryption and private key decryption with
    padding (e.g. OAEP, PKCS) as non-approved since RSA-OAEP lacks
    peer key assurance validation requirements per SP800-56Brev2.
  * Mark ECC as approved only for NIST curves P-224, P-256, P-384
    and P-521 with check for common NIST names and aliases.
  * Mark DSA, ELG, EDDSA, ECDSA and ECDH as non-approved.
  * Add libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt-FIPS-service-indicators.patch
- Run the regression tests also in FIPS mode.
  * Disable tests for non-FIPS approved algos.
  * Rebase: libgcrypt-FIPS-verify-unsupported-KDF-test.patch</changelog>
  <changelog author="dennis.knorr@suse.com" date="1649937600">- FIPS: extend the service indicator [bsc#1190700]
  * introduced a pk indicator function
  * adapted the approved and non approved ciphersuites
  * Add libgcrypt_indicators_changes.patch
  * Add libgcrypt-indicate-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port libgcrypt to use jitterentropy [bsc#1202117, jsc#SLE-24941]
  * Enable the jitter based entropy generator by default in random.conf
  - Add libgcrypt-jitterentropy-3.3.0.patch
  * Update the internal jitterentropy to version 3.4.0
  - Add libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661256000">- FIPS: gpg/gpg2 gets out of core handler in FIPS mode while
  typing Tab key to Auto-Completion. [bsc#1182983]
  * Add libgcrypt-out-of-core-handler.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662552000">- FIPS: Zeroize buffer and digest in check_binary_integrity()
  * Add libgcrypt-FIPS-Zeroize-hmac.patch [bsc#1191020]</changelog>
  <changelog author="pmonreal@suse.com" date="1662552001">- FIPS: Check keylength in gcry_fips_indicator_kdf() [bsc#1190700]
  * Consider approved keylength greater or equal to 112 bits.
  * Add libgcrypt-FIPS-kdf-leylength.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677931200">- FIPS: PBKDF2: Add additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  fips indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
  * Add libgcrypt-FIPS-pkdf2-Additional-checks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104000">- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
  * Add libgcrypt-FIPS-ECC-disallow-skip-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104001">- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
  * Add libgcrypt-FIPS-ECC-PCT-Add-transition-to-error.patch</changelog>
</package>
<package pkgid="3c786200b6c75eae3734c53c07f4c9fb05e97e192d34a522892c1bbcb29e8d3c" name="libgcrypt20-hmac" arch="aarch64">
  <version epoch="0" ver="1.9.4" rel="150400.6.8.1"/>
  <changelog author="pmonreal@suse.com" date="1632225600">- FIPS: Enable hardware support also in FIPS mode [bsc#1187110]
  * Add libgcrypt-FIPS-hw-optimizations.patch
  * Upstream task: https://dev.gnupg.org/T5508</changelog>
  <changelog author="pmonreal@suse.com" date="1632225601">- FIPS: Provide a module name/identifier and version that can be
  mapped to the validation records. [bsc#1190706]
  * Add libgcrypt-FIPS-module-version.patch
  * Upstream task: https://dev.gnupg.org/T5600</changelog>
  <changelog author="pmonreal@suse.com" date="1635422400">- FIPS: Fix regression tests in FIPS mode [bsc#1192131]
  * Add libgcrypt-FIPS-fix-regression-tests.patch
  * Upstream task: https://dev.gnupg.org/T5520</changelog>
  <changelog author="pmonreal@suse.com" date="1635854400">- FIPS: PBKDF requirements [bsc#1185137]
  * The PBKDF2 selftests were introduced in libgcrypt version
    1.9.1 in the function selftest_pbkdf2()
  * Upstream task: https://dev.gnupg.org/T5182</changelog>
  <changelog author="pmonreal@suse.com" date="1636372800">- FIPS: Disable 3DES/Triple-DES in FIPS mode [bsc#1185138]
  * Add libgcrypt-FIPS-disable-3DES.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1637928000">- FIPS: RSA KeyGen/SigGen fail with 4096 bit key sizes [bsc#1192240]
  * rsa: Check RSA keylen constraints for key operations.
  * rsa: Fix regression in not returning an error for prime generation.
  * tests: Add 2k RSA key working in FIPS mode.
  * tests: pubkey: Replace RSA key to one of 2k.
  * tests: pkcs1v2: Skip tests with small keys in FIPS.
  * Add patches:
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1638273600">- FIPS: Define an entropy source SP800-90B compliant [bsc#1185140]
  * Disable jitter entropy by default in random.conf
  * Disable only-urandom option by default in random.conf</changelog>
  <changelog author="pmonreal@suse.com" date="1638878400">- FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
  * gcry_mpi_sub_ui: fix subtracting from negative value
  * Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1642593600">- FIPS: Service level indicator [bsc#1190700]
  * Provide an indicator to check wether the service utilizes an
    approved cryptographic algorithm or not.
  * Add patches:
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1643716800">- FIPS: Disable DSA in FIPS mode [bsc#1195385]
  * Upstream task: https://dev.gnupg.org/T5710
  * Add libgcrypt-FIPS-disable-DSA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647950400">- FIPS: Implement a service indicator for asymmetric ciphers [bsc#1190700]
  * Mark RSA public key encryption and private key decryption with
    padding (e.g. OAEP, PKCS) as non-approved since RSA-OAEP lacks
    peer key assurance validation requirements per SP800-56Brev2.
  * Mark ECC as approved only for NIST curves P-224, P-256, P-384
    and P-521 with check for common NIST names and aliases.
  * Mark DSA, ELG, EDDSA, ECDSA and ECDH as non-approved.
  * Add libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt-FIPS-service-indicators.patch
- Run the regression tests also in FIPS mode.
  * Disable tests for non-FIPS approved algos.
  * Rebase: libgcrypt-FIPS-verify-unsupported-KDF-test.patch</changelog>
  <changelog author="dennis.knorr@suse.com" date="1649937600">- FIPS: extend the service indicator [bsc#1190700]
  * introduced a pk indicator function
  * adapted the approved and non approved ciphersuites
  * Add libgcrypt_indicators_changes.patch
  * Add libgcrypt-indicate-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port libgcrypt to use jitterentropy [bsc#1202117, jsc#SLE-24941]
  * Enable the jitter based entropy generator by default in random.conf
  - Add libgcrypt-jitterentropy-3.3.0.patch
  * Update the internal jitterentropy to version 3.4.0
  - Add libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661256000">- FIPS: gpg/gpg2 gets out of core handler in FIPS mode while
  typing Tab key to Auto-Completion. [bsc#1182983]
  * Add libgcrypt-out-of-core-handler.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662552000">- FIPS: Zeroize buffer and digest in check_binary_integrity()
  * Add libgcrypt-FIPS-Zeroize-hmac.patch [bsc#1191020]</changelog>
  <changelog author="pmonreal@suse.com" date="1662552001">- FIPS: Check keylength in gcry_fips_indicator_kdf() [bsc#1190700]
  * Consider approved keylength greater or equal to 112 bits.
  * Add libgcrypt-FIPS-kdf-leylength.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677931200">- FIPS: PBKDF2: Add additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  fips indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
  * Add libgcrypt-FIPS-pkdf2-Additional-checks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104000">- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
  * Add libgcrypt-FIPS-ECC-disallow-skip-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104001">- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
  * Add libgcrypt-FIPS-ECC-PCT-Add-transition-to-error.patch</changelog>
</package>
<package pkgid="c90f28468fac900feca3ecc4ad8e4bfde8655a3a270cbf203bb82d8925753d52" name="libgcrypt20-hmac" arch="s390x">
  <version epoch="0" ver="1.9.4" rel="150400.6.8.1"/>
  <changelog author="pmonreal@suse.com" date="1632225600">- FIPS: Enable hardware support also in FIPS mode [bsc#1187110]
  * Add libgcrypt-FIPS-hw-optimizations.patch
  * Upstream task: https://dev.gnupg.org/T5508</changelog>
  <changelog author="pmonreal@suse.com" date="1632225601">- FIPS: Provide a module name/identifier and version that can be
  mapped to the validation records. [bsc#1190706]
  * Add libgcrypt-FIPS-module-version.patch
  * Upstream task: https://dev.gnupg.org/T5600</changelog>
  <changelog author="pmonreal@suse.com" date="1635422400">- FIPS: Fix regression tests in FIPS mode [bsc#1192131]
  * Add libgcrypt-FIPS-fix-regression-tests.patch
  * Upstream task: https://dev.gnupg.org/T5520</changelog>
  <changelog author="pmonreal@suse.com" date="1635854400">- FIPS: PBKDF requirements [bsc#1185137]
  * The PBKDF2 selftests were introduced in libgcrypt version
    1.9.1 in the function selftest_pbkdf2()
  * Upstream task: https://dev.gnupg.org/T5182</changelog>
  <changelog author="pmonreal@suse.com" date="1636372800">- FIPS: Disable 3DES/Triple-DES in FIPS mode [bsc#1185138]
  * Add libgcrypt-FIPS-disable-3DES.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1637928000">- FIPS: RSA KeyGen/SigGen fail with 4096 bit key sizes [bsc#1192240]
  * rsa: Check RSA keylen constraints for key operations.
  * rsa: Fix regression in not returning an error for prime generation.
  * tests: Add 2k RSA key working in FIPS mode.
  * tests: pubkey: Replace RSA key to one of 2k.
  * tests: pkcs1v2: Skip tests with small keys in FIPS.
  * Add patches:
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1638273600">- FIPS: Define an entropy source SP800-90B compliant [bsc#1185140]
  * Disable jitter entropy by default in random.conf
  * Disable only-urandom option by default in random.conf</changelog>
  <changelog author="pmonreal@suse.com" date="1638878400">- FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
  * gcry_mpi_sub_ui: fix subtracting from negative value
  * Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1642593600">- FIPS: Service level indicator [bsc#1190700]
  * Provide an indicator to check wether the service utilizes an
    approved cryptographic algorithm or not.
  * Add patches:
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1643716800">- FIPS: Disable DSA in FIPS mode [bsc#1195385]
  * Upstream task: https://dev.gnupg.org/T5710
  * Add libgcrypt-FIPS-disable-DSA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647950400">- FIPS: Implement a service indicator for asymmetric ciphers [bsc#1190700]
  * Mark RSA public key encryption and private key decryption with
    padding (e.g. OAEP, PKCS) as non-approved since RSA-OAEP lacks
    peer key assurance validation requirements per SP800-56Brev2.
  * Mark ECC as approved only for NIST curves P-224, P-256, P-384
    and P-521 with check for common NIST names and aliases.
  * Mark DSA, ELG, EDDSA, ECDSA and ECDH as non-approved.
  * Add libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt-FIPS-service-indicators.patch
- Run the regression tests also in FIPS mode.
  * Disable tests for non-FIPS approved algos.
  * Rebase: libgcrypt-FIPS-verify-unsupported-KDF-test.patch</changelog>
  <changelog author="dennis.knorr@suse.com" date="1649937600">- FIPS: extend the service indicator [bsc#1190700]
  * introduced a pk indicator function
  * adapted the approved and non approved ciphersuites
  * Add libgcrypt_indicators_changes.patch
  * Add libgcrypt-indicate-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port libgcrypt to use jitterentropy [bsc#1202117, jsc#SLE-24941]
  * Enable the jitter based entropy generator by default in random.conf
  - Add libgcrypt-jitterentropy-3.3.0.patch
  * Update the internal jitterentropy to version 3.4.0
  - Add libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661256000">- FIPS: gpg/gpg2 gets out of core handler in FIPS mode while
  typing Tab key to Auto-Completion. [bsc#1182983]
  * Add libgcrypt-out-of-core-handler.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662552000">- FIPS: Zeroize buffer and digest in check_binary_integrity()
  * Add libgcrypt-FIPS-Zeroize-hmac.patch [bsc#1191020]</changelog>
  <changelog author="pmonreal@suse.com" date="1662552001">- FIPS: Check keylength in gcry_fips_indicator_kdf() [bsc#1190700]
  * Consider approved keylength greater or equal to 112 bits.
  * Add libgcrypt-FIPS-kdf-leylength.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677931200">- FIPS: PBKDF2: Add additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  fips indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
  * Add libgcrypt-FIPS-pkdf2-Additional-checks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104000">- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
  * Add libgcrypt-FIPS-ECC-disallow-skip-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104001">- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
  * Add libgcrypt-FIPS-ECC-PCT-Add-transition-to-error.patch</changelog>
</package>
<package pkgid="6190cfe0762badc1e6567cc9a024810f47dde6b3569840fcb1108ca3a787c1ad" name="libgcrypt20-hmac" arch="x86_64">
  <version epoch="0" ver="1.9.4" rel="150400.6.8.1"/>
  <changelog author="pmonreal@suse.com" date="1632225600">- FIPS: Enable hardware support also in FIPS mode [bsc#1187110]
  * Add libgcrypt-FIPS-hw-optimizations.patch
  * Upstream task: https://dev.gnupg.org/T5508</changelog>
  <changelog author="pmonreal@suse.com" date="1632225601">- FIPS: Provide a module name/identifier and version that can be
  mapped to the validation records. [bsc#1190706]
  * Add libgcrypt-FIPS-module-version.patch
  * Upstream task: https://dev.gnupg.org/T5600</changelog>
  <changelog author="pmonreal@suse.com" date="1635422400">- FIPS: Fix regression tests in FIPS mode [bsc#1192131]
  * Add libgcrypt-FIPS-fix-regression-tests.patch
  * Upstream task: https://dev.gnupg.org/T5520</changelog>
  <changelog author="pmonreal@suse.com" date="1635854400">- FIPS: PBKDF requirements [bsc#1185137]
  * The PBKDF2 selftests were introduced in libgcrypt version
    1.9.1 in the function selftest_pbkdf2()
  * Upstream task: https://dev.gnupg.org/T5182</changelog>
  <changelog author="pmonreal@suse.com" date="1636372800">- FIPS: Disable 3DES/Triple-DES in FIPS mode [bsc#1185138]
  * Add libgcrypt-FIPS-disable-3DES.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1637928000">- FIPS: RSA KeyGen/SigGen fail with 4096 bit key sizes [bsc#1192240]
  * rsa: Check RSA keylen constraints for key operations.
  * rsa: Fix regression in not returning an error for prime generation.
  * tests: Add 2k RSA key working in FIPS mode.
  * tests: pubkey: Replace RSA key to one of 2k.
  * tests: pkcs1v2: Skip tests with small keys in FIPS.
  * Add patches:
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1638273600">- FIPS: Define an entropy source SP800-90B compliant [bsc#1185140]
  * Disable jitter entropy by default in random.conf
  * Disable only-urandom option by default in random.conf</changelog>
  <changelog author="pmonreal@suse.com" date="1638878400">- FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
  * gcry_mpi_sub_ui: fix subtracting from negative value
  * Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1642593600">- FIPS: Service level indicator [bsc#1190700]
  * Provide an indicator to check wether the service utilizes an
    approved cryptographic algorithm or not.
  * Add patches:
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1643716800">- FIPS: Disable DSA in FIPS mode [bsc#1195385]
  * Upstream task: https://dev.gnupg.org/T5710
  * Add libgcrypt-FIPS-disable-DSA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647950400">- FIPS: Implement a service indicator for asymmetric ciphers [bsc#1190700]
  * Mark RSA public key encryption and private key decryption with
    padding (e.g. OAEP, PKCS) as non-approved since RSA-OAEP lacks
    peer key assurance validation requirements per SP800-56Brev2.
  * Mark ECC as approved only for NIST curves P-224, P-256, P-384
    and P-521 with check for common NIST names and aliases.
  * Mark DSA, ELG, EDDSA, ECDSA and ECDH as non-approved.
  * Add libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt-FIPS-service-indicators.patch
- Run the regression tests also in FIPS mode.
  * Disable tests for non-FIPS approved algos.
  * Rebase: libgcrypt-FIPS-verify-unsupported-KDF-test.patch</changelog>
  <changelog author="dennis.knorr@suse.com" date="1649937600">- FIPS: extend the service indicator [bsc#1190700]
  * introduced a pk indicator function
  * adapted the approved and non approved ciphersuites
  * Add libgcrypt_indicators_changes.patch
  * Add libgcrypt-indicate-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port libgcrypt to use jitterentropy [bsc#1202117, jsc#SLE-24941]
  * Enable the jitter based entropy generator by default in random.conf
  - Add libgcrypt-jitterentropy-3.3.0.patch
  * Update the internal jitterentropy to version 3.4.0
  - Add libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661256000">- FIPS: gpg/gpg2 gets out of core handler in FIPS mode while
  typing Tab key to Auto-Completion. [bsc#1182983]
  * Add libgcrypt-out-of-core-handler.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662552000">- FIPS: Zeroize buffer and digest in check_binary_integrity()
  * Add libgcrypt-FIPS-Zeroize-hmac.patch [bsc#1191020]</changelog>
  <changelog author="pmonreal@suse.com" date="1662552001">- FIPS: Check keylength in gcry_fips_indicator_kdf() [bsc#1190700]
  * Consider approved keylength greater or equal to 112 bits.
  * Add libgcrypt-FIPS-kdf-leylength.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677931200">- FIPS: PBKDF2: Add additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  fips indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
  * Add libgcrypt-FIPS-pkdf2-Additional-checks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104000">- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
  * Add libgcrypt-FIPS-ECC-disallow-skip-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104001">- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
  * Add libgcrypt-FIPS-ECC-PCT-Add-transition-to-error.patch</changelog>
</package>
<package pkgid="c52a1d28e971a9f806e9a0fe936c4ee7e7a9e5a14011be87f2d79bf0db09d083" name="libgio-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="29795c9bfbf3994e162fe8cac8c28dbc4ff37ddcaed3179ef4dccd3c6cb6d710" name="libgio-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="347b626d67f3678d71a71edc8b78ca9d9317619833585b810767bf16b49e1926" name="libgio-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="12ecf16f21c6b11838646b915014528cf49f76e8b80abc12c7b68b20b83e6597" name="libglib-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="80c45fa65914169c3e2c3ebb1f790aebe9019324ef5aab2ede72ecc5ca891a02" name="libglib-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="76e8e0a8ffcc14ef64314a58705390bb4fe033994f353223e24e10c968f266b3" name="libglib-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="4229a1daf339e992e039863e372d7b0368ed627b932889d568690487ee13bd5c" name="libgmodule-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="848a940867c105d14aaa124f07fcc1396e2a5046074ae03fb75f6b3878e10e2a" name="libgmodule-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="313fb1095aff70b4101cc5ef8590c5f6e5cb70d466bb3001257bf6c35cd9452f" name="libgmodule-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="b244a4e161d2cc0e30c39440c175e4a4674463dc98fbfc21f9b04072234470ad" name="libgnutls30" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="9471f09dfec0711472e9f26251e94b06beb552805cb06e80e64af0f51049b31f" name="libgnutls30" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="1571f67ff2585cb12db67581facae42e988ae6b78d2fef3a082e2c2675fdc52d" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="9b0f6c30c40f842431bcb388356d738eb4bf73cb3a26b190273ba7d766a82c92" name="libgnutls30-hmac" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="d9972c9ce4a928486d5ac4503d8628226f4523611fa4dd342c8e2f82a0318a09" name="libgnutls30-hmac" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="7e332fdda2ccb3c9164fea17dc42469efda4bd21e429044f0223d4df26a36b0e" name="libgnutls30-hmac" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="23ad20843769b45ef75bdfa34ce82278a4c6814db31c8eadf086116a31f96b57" name="libgobject-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="16257a26c720e13656b60ad0e0990577a4e0db5362eccbe0581c3d6795907225" name="libgobject-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="02e6a39d30930b834c1373177986fcf74ffba73dcc5c232db74ca3925a138c69" name="libgobject-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="16ad93786e1ffb13893b12a0faaf7524edcb280fc139944890c4f25ad0b878cf" name="libibverbs" arch="aarch64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="634b193e61c036ef8af5048079b8b904aeadfed714b38efa3f531e459578c38a" name="libibverbs" arch="s390x">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="f2cdd80f49f2b0a31572edbbf0a02ce6ba898eab9f10cfbeb8af90b4ea2903e2" name="libibverbs" arch="x86_64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="d560479b5137043bad9efcd71483a2e76f36ca987589ceca8e7da36876a0a469" name="libibverbs1" arch="aarch64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="d35d40c2458a539413a8fedd1a52df0c0dec7bcb38c4ece304c60fb83ef3e334" name="libibverbs1" arch="s390x">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="e146fabf3f38d493eb21fd9c2f7d47e9f5b450b09e81b59a56dcc57ea60719ee" name="libibverbs1" arch="x86_64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="552c68090ea787e7b7b0ed1a462b27b460260e3bd8d0f8f58b9ab0cdf4ae7773" name="libjansson" arch="src">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="84b58c2b91fd59a828cca70a3987ba4f8bc01956278c354ca074671f4c3e4e7a" name="libjansson4" arch="aarch64">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="71f80b8ef224453ac706429a72de522fcca676e59c5c672d5d0570aef60549fd" name="libjansson4" arch="s390x">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="35363333982837d88078996a0e6b3b410821c8fa405a5870ffb5396ed0277ae1" name="libjansson4" arch="x86_64">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="fa6e61d5e16085890313983c3cf445ca06d42c86c0c932e15785160af55c2f8a" name="libkmipclient1" arch="s390x">
  <version epoch="0" ver="2.19.0" rel="150400.7.21.1"/>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183810)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183810.</changelog>
  <changelog author="mpost@suse.com" date="1620302400">- Modified s390-tools-sles15-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)
- Modified s390-tools-sles15-Implement-f-for-backwards-compability.patch
  to have the correct offset for hunk #2 to apply without warnings.</changelog>
  <changelog author="mpost@suse.com" date="1622030400">- Modified the following patches to correct the output from the
  dasdfmt command when *not* using "YaST mode." (bsc#1182816, bsc#1182820)
  * s390-tools-sles15sp3-Format-devices-in-parallel.patch
  * s390-tools-sles15sp3-Implement-Y-yast_mode.patch</changelog>
  <changelog author="mpost@suse.com" date="1624017600">- Reworked s390-tools-sles15sp2-Implement-Y-yast_mode.patch (yet
  again). If more DASD volumes are to be formatted than are allowed
  by the "maximum number to do in parallel" parameter, dasdfmt
  waits until one of the child processes ends before starting another.
  For YaST to be able to figure out how many cylinders a particular
  DASD volume has, that information has to be output for _all_ of the
  volumes, before any of the child processes are spawned.
  (bsc#1187012)</changelog>
  <changelog author="mpost@suse.com" date="1634558400">- Updated the spec file to correspond to the changes made to the
  location and name of the kernel image in the kernel-zfcpdump
  package (bsc#1189841)
- Did some spec file cleanup based on the recommendations from
  spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1636718400">- Added s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
  Reading /sys/kernel/mm/page_idle/bitmap can cause hang up on
  reading offline pages. (bsc#1192599)
- Added %{version} to the Requires: libekmfweb1 for the
  libekmfweb1-devel package.</changelog>
  <changelog author="mpost@suse.com" date="1641988800">- Upgraded to version 2.19.0 (jsc#SLE-18324)
  * v2.19.0 (2021-11-10)__
    Add new tools / libraries:
  - chreipl-fcp-mpath: New toolset that uses multipath information to change
    the configured FCP re-IPL path on detecting issues with the current path
    Changes of existing tools:
  - dbginfo.sh: Add retry timeout and remove possible blocking "blockdev --report"
  - dbginfo.sh: Collect config- and debug-data for chreipl-fcp-mpath
  - hsci: Add support for multiple MAC addresses
    Bug Fixes:
  - lshwc: Fix compile error for gcc &lt;8.1
  - zdump: Various clean-ups and fixes
  - ziomon: Correct throughput calculation in ziorep_printers
  - zipl: Fix segmentation fault when setting stage3_parms
  * v2.18.0 (2021-10-01)__
    Add new tools:
  - scripts: Add tool for parsing sclp s390dbf logs
  - zdev: Add udev rule helper tool
  - zipl-editenv: Add tool to operate with zIPL environment installed in the boot record
    Changes of existing tools:
  - Makefile: Fix order of build of libraries for parallel builds
  - dbginfo.sh: Add collection in area of timedate, coredump and --check option
  - dbginfo.sh: Add exception on dump2tar for /sys/kernel/mm/page_idle/bitmap
  - dbginfo.sh: Cleanup of outdated sections and general code rework
  - dbginfo.sh: Collect zipl boot menu entries from boot loader specification
  - lszcrypt: Add support for vfio-ap status field
  - lszcrypt: Improved output for deconfig cards and queues
  - lszfcp: Add linkdown case to host marker of extended output
  - zdev: Add auto-config for PCI and crypto devices
  - zdump: Introduce multi-level message logging
  - zipl: Add support for environment block interpretation
  - zkey-cryptsetup: Support LUKS2 volumes with integrity support enabled
    Bug Fixes:
  - hsavmcore: Avoid recompilation of overlay during install step
  - libkmipclient: Fix parsing of hex values for XML and JSON encoding
  - vmur/vmur.cpp: Fix error handling on transfer failure
  - zdump: Lots of smaller fixes across the board
  * v2.17.0 (2021-07-07)__
    Add new tools / libraries:
  - hsavmcore: New utility to make the dump process with kdump more efficient
  - libkmipclient: Add KMIP client shared library
  - libseckey: Add a secure key library
  - lshwc: New tool to extract and list complete counter sets
    Changes of existing tools:
  - genprotimg: Add '--(enable|disable)-pckmo' options
  - genprotimg: Add OpenSSL 3.0 support
  - genprotimg: Change plaintext control flags defaults so PCKMO functions are allowed
  - libutil: Introduce multi-level message logging (util_log)
  - libutil: Introduce util_arch module
  - udev/dasd: Change DASD udev-rule to set none scheduler
  - zdsfs: Add transparent codepage conversion
  - zkey: Add support for KMIP-based key management systems
    Bug Fixes:
  - ttyrun-getty: Avoid conflicts with serial-getty@
  - dbginfo: add /proc/kallsyms - refresh zVM, lscpu - fix WORKARCHIVE handling
  - dbginfo: add KVM data collection for server and guest - fix lszdev
  - genprotimg: Add missing return values in error paths
  - zkey: Fix conversion of CCA DATA keys to CCA CIPHER keys
  - znetconf: avoid conflict with "chzdev -e"
  * v2.16.0 (2021-02-19)__
    Add new tool:
  - hsci: New tool to manage HSCI (HiperSockets Converged Interfaces)
    Changes of existing tools:
  - genprotimg: Add host-key document verification support
  - genprotimg: boot: Make boot loader -march=z900 compatible
  - libekmfweb: Make install directory for shared libraries configurable
  - lsdasd: Add FC Endpoint Security information
  - make: Add address sanitizer support
  - netboot: Add version information to scripts
  - netboot: Bump busybox version in pxelinux.0 build
  - zdev: Add FC Endpoint Security information for DASD devices
  - zdev: Add build option to update initial RAM-disk by default
  - zkey-ekmfweb: Avoid sequence number clash when generating keys
  - zkey/zkey-ekmfweb: Install KMS plugins into configurable location
  - zkey: Add support to store LUKS2 dummy passphrase in key repository
    Bug Fixes:
  - dasdfmt: Fix segfault when an incorrect option is specified
  - genprotimg: Fix several build issues
  - genprotimg: Require argument for 'ramdisk' and 'parmfile' options
  - zcryptstats: Fix handling of partial results with many domains
  - zfcpdbf: Deal with crash 7.2.9 change in caller name formatting
  - zipl/boot: Fix memory use after free in stage2
  - zipl/boot: Fix potential heap overflow in stage2
  - zipl: Fix reading 4k disk's geometry
- Added the following two IBM patches:
  * s390-tools-sles15sp4-chreipl-fcp-mpath-don-t-compress-the-manpage-before-.patch
  * s390-tools-sles15sp4-chreipl-fcp-mpath-remove-shebang-from-chreipl-fcp-mp.patch
- Removed the following obsolete patches
  * s390-tools-sles15sp3-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
  * s390-tools-sles15sp3-libutil-Compare-proc-entries-to-vfstype.patch
  * s390-tools-sles15sp3-01-zdev-Add-FC-Endpoint-Security-information-for-DASD-d.patch
  * s390-tools-sles15sp3-02-lsdasd-Add-FC-Endpoint-Security-information.patch
  * s390-tools-sles15sp3-hsci-Add-new-tool-to-control-HiperSockets-Converged-.patch
  * s390-tools-sles15sp3-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  * s390-tools-sles15sp3-01-genprotimg-abort-if-one-of-the-recursive-targets-is-.patch
  * s390-tools-sles15sp3-02-genprotimg-fix-two-memory-leaks.patch
  * s390-tools-sles15sp3-03-genprotimg-require-argument-for-ramdisk-and-parmfile.patch
  * s390-tools-sles15sp3-04-genprotimg-add-host-key-document-verification-suppor.patch
  * s390-tools-sles15sp3-zkey-Fix-APQN-property-names.patch
  * s390-tools-sles15sp3-zipl-fix-4k-scsi-ipl.patch
  * s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  * s390-tools-sles15sp3-check-return-code-from-util_file_read_l.patch
  * s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
- Removed an obsolete "export ROOT_BUILD_DIR" statement from the spec file.
- Removed unnecessary defattr statements in the files section.</changelog>
  <changelog author="mpost@suse.com" date="1645531200">- Added s390-tools-sles15sp4-zdev-modify-the-lsblk-output-parser-in-lszdev.patch
  for bsc#1196255. Version 2.37+ of util-linux modified the output
  characters of lsblk,which breaks the parser function.
- Added s390-tools-sles15sp4-zdev-Fix-path-resolution-for-multi-mount-point-file-.patch
  for bsc#1196254. Path resolution fails when a device provides
  multiple mount points such as, for example, when using btrfs
  subvolumes, or when mounting the same file system at multiple
  mount points.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files into %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mpost@suse.com" date="1649678400">- Added the following patches for bsc#1198285:
  s390-tools-sles15sp4-01-genprotimg-remove-DigiCert-root-CA-pinning.patch
  s390-tools-sles15sp4-02-genprotimg-check_hostkeydoc-relax-default-issuer-che.patch
  The certificate verification of check_hostkeydoc is too strict and
  doesn't match the checking performed by genprotimg.
- Added the following patch for bsc#1198284:
  s390-tools-sles15sp4-libseckey-Fix-re-enciphering-of-EP11-secure-key.patch
  When re-enciphering the identity key and/or wrapping key of the
  zkey KMIP plugin via 'zkey kms reencipher', the operation
  completes without an error, but the secure keys are left
  un-reenciphered.</changelog>
  <changelog author="mpost@suse.com" date="1649937600">- Updated the cputype script to include the model number of IBM's
  recently announced z16 processor.</changelog>
  <changelog author="mpost@suse.com" date="1651579200">- Added s390-tools-sles15sp4-zdump-fix-segfault-due-to-double-free.patch
  for bsc#1199128. zgetdump --info may lead to a core dump when
  issued for the device node (not a partition) right after
  installing multi-volume dump tool (without taking actual dump).</changelog>
  <changelog author="mpost@suse.com" date="1653566400">- Added s390-tools-sles15sp4-libseckey-Adapt-keymgmt_match-implementation-to-Open.patch
  for bsc#1199649. zkey: KMIP plugin fails to connection to KMIP server
  When a zkey key repository is bound to the KMIP plugin, and the
  connection to the KMIP server is to be configired using command
  'zkey kms configure --kmip-server &lt;server&gt;', it fails to connect
  to the specified KMIP server.</changelog>
  <changelog author="mpost@suse.com" date="1654171200">- Added s390-tools-sles15sp4-genprotimg-boot-disable-Warray-bounds-for-now.patch
  to fix a build failure with gcc12. With gcc12, a "false positive"
  of "array subscript 0 is outside array bounds" is seen in
  genprotimg/boot/stage3a.c (bsc#1200131).</changelog>
  <changelog author="mpost@suse.com" date="1658145600">- Added s390-tools-sles15sp4-hyptop-increase-initial-update-interval.patch
  for bsc#1201412. Initial iteration of hyptop can produce bloated values
  independent from the update delay set by the user.</changelog>
  <changelog author="mpost@suse.com" date="1667476800">- Added s390-tools-sles15sp4-zipl-boot-add-secure-boot-trailer.patch
  for bsc#1204965. New IBM Z firmware requires all signed boot
  images to contain a trailing data block with a specific format.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1672747200">-  Added the following patches for
  KVM: Secure Execution Attestation Userspace Tool (s390-tools)
  (jsc#SLE-24831, jsc#SLE-22854, bsc#1206706)
  * s390-tools-sles15sp4-libpv-New-library-for-PV-tools.patch
  * s390-tools-sles15sp4-pvattest-tools-Add-tool-for-attestation.patch
  * s390-tools-sles15sp4-pvattest-Improve-error-reporting.patch
  * s390-tools-sles15sp4-pvattest-Create-perform-and-verify-attestation-measu.patch
  * s390-tools-sles15sp4-pvattest-Improve-logging.patch
  * s390-tools-sles15sp4-pvattest-Add-more-information-to-verbose-logging.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1674475200">- Added the following patches for bsc#1207175, jsc#SLE-2285, and
  ECO jsc#SLE-24835:
  ap_tools: add ap-check and the ap device type to zdev. This
  feature adds multiple components in support of persistent
  configuration of vfio-ap mediated devices.
  * s390-tools-sles15sp4-01-libutil-add-util_exit_code.patch
  * s390-tools-sles15sp4-02-libutil-Move-some-zdev-file-reading-functions-into-u.patch
  * s390-tools-sles15sp4-03-libutil-Introduce-util_udev.patch
  * s390-tools-sles15sp4-04-libap-Add-library-for-ap-vfio-ap-management-tools.patch
  * s390-tools-sles15sp4-05-ap_tools-Introduce-ap_tools-and-the-ap-check-tool.patch
  * s390-tools-sles15sp4-06-zdev-Introduce-the-ap-device-type.patch
  * s390-tools-sles15sp4-07-libutil-introduce-util_lockfile.patch
  * s390-tools-sles15sp4-08-libutil-add-example-for-util_lockfile.patch
  * s390-tools-sles15sp4-09-libap-use-util_lockfile-and-remove-liblockfile-depen.patch
  * s390-tools-sles15sp4-10-ap_tools-ap-check-use-new-mdevctl-install-location.patch
  * s390-tools-sles15sp4-11-util_lockfile-fix-includes.patch
- Updated the spec file to:
  * Add %dir entries for:
    %{_sysconfdir}/mdevctl.d
    %{_sysconfdir}/mdevctl.d/scripts.d
    %{_sysconfdir}/mdevctl.d/scripts.d/callouts
    %{_prefix}/lib/mdevctl,
    %{_prefix}/lib/mdevctl/scripts.d, and
    %{_prefix}/lib/mdevctl/scripts.d/callouts
    NOTE that these directories do not belong to this package, but
    the mdevctl package has yet to be updated to claim them. So,
    until that happens, we have to temporarily claim ownership of
    them for the s390-tools package to build.
  * Modify the find/grep commands that generate the list of files
    for the package to avoid having files listed more than once.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678449600">- Added the folowing patches (bsc#1209002, and bsc#1209003)
  - Fixes vmcp buffer evalutaion
  * s390-tools-sles15sp4-dbginfo.sh-fix_vmcp_buffer.patch
  - Adds support for kubernetes data collection
  * s390-tools-sles15sp4-dbginfo.sh-add_kubernetes.patch
- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
  when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1684324800">- Applied patches (bsc#1211318)
  * s390-tools-sles15sp4-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp4-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
</package>
<package pkgid="f72e13e15de34609442a4bbede5f2b3cc06da9daa2d1cc41cc9755267b7f1c02" name="libldap-2_4-2" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="5c39e355d6aaf6e70b238779f36845916638546f099fe1f462645c797073ce9f" name="libldap-2_4-2" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="e65f3bdd8cd68295e244024aec80a7d49343c651c24fa8985394b62902b3af19" name="libldap-2_4-2" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="7b863f2951781bc3332d8fc1cbdb84c8f22f732d7536fd2e478f7b07500a5b77" name="libldap-2_4-2" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.17.1"/>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
</package>
<package pkgid="ae9939b1efb1fabd51019f9540b2f6740436b4eff65d4ad2b623446262a05180" name="libldap-2_4-2" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.17.1"/>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
</package>
<package pkgid="5a26d335b5c2ac31fa988cca2e5e80f9987a1dd994b6fd8157b6ad006753b80e" name="libldap-2_4-2" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.17.1"/>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
</package>
<package pkgid="1c1f6e5f07d78dde0216b6e0cf5d1f1d1c39e8c58045a758e8537461a99d0da8" name="libldap-data" arch="noarch">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="b62990fc54b48e6e90462cff7d2424394a7317cea0935be64b5dd4a30dc4a4e5" name="libldap-data" arch="noarch">
  <version epoch="0" ver="2.4.46" rel="150200.14.17.1"/>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
</package>
<package pkgid="ba5ccee693d278c786900ae96d391c1625a5d2c1dc0dac2be88e2002802e9343" name="libmicrohttpd" arch="src">
  <version epoch="0" ver="0.9.57" rel="150000.3.3.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1436788800">- fix build for SLES11:
  * update disable-stalling-test.patch: Instead of disabling testcase
  in Makefile disable testcases in code, this could be even better
  we can disable only broken test but not the whole testcase.
  * add libmicrohttpd_test_session.patch: Disable test relying on
  available libcurl version
  (see https://gnunet.org/bugs/view.php?id=3893 for details)
  * wrap libmicrosdpy into macro to disable building on
  systems with openssl &lt; 1.0.1
- update to 0.9.42:
  * fix off-by-one in MHD_start_daemon_va() error handling logic
  * fix #3784: actually implement MHD_CONNECTION_INFO_SOCKET_CONTEXT</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1436961600">- fux build for SLES11:
  * explicitly require libgnutls-devel in -devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1442664000">- Update to 0.9.43
  * Call resume_suspended_connections() when the user is running
    its own mainloop and calls MHD_run_from_select() to support
    resuming connections with external select. -FC
  * Correct documentation as to when MHD_USE_EPOLL_LINUX_ONLY
    is allowed. -CG
  * Reimplement monotonic clock functions for better
    support various platforms.
    Print more information during configure. -EG
  * Export MHD_get_reason_phrase_for() symbol. -CG
  * Added checks for overflows and buffer overruns, fixed
    possible buffer overrun. Updated md5 implementation.
    Fixed many compiler warning (mostly for VC compiler). -EG
  * Fix failure to properly clean up timed out connections
    if running in external select mode without listen socket,
    which caused busy waiting until new connections arrived.
    (Fixes #3924, thanks to slimp for reporting and testcase). -CG
  * Ignore close() errors on sockets except for EBADF,
    fixes #3926. -CG
  * Make sure to decrement connection counter before
    calling connection notifier so that
    MHD_DAEMON_INFO_CURRENT_CONNECTIONS does not
    present stale information (relevant if this is
    used for termination detection of a daemon
    stopped via MHD_quiesce_daemon()). Thanks to
    Markus Doppelbauer for reporting. -CG
  * Fix (automatic) handling of HEAD requests with
    MHD_create_response_from_callback() and HTTP/1.1
    connection keep-alives. Thanks to Cristian Klein
    for reporting. -CG
  * Add new functions MHD_create_response_from_fd64() and
    MHD_create_response_from_fd_at_offset64(). -EG
  * Fixing memory leak in digest authentication. -AW
  * Add deprecation compiler messages for deprecated functions
    and macros. -EG
  * Fixing digest authentication when used in combination
    with escaped characters in URLs. -CG/AW
- Disable spdy support for now as spdylay is missing
- Drop libmicrohttpd_test_session.patch as it is fixed now</changelog>
  <changelog author="mpluskal@suse.com" date="1443787200">- Update to 0.9.44
  * Various fixes for W32 VS project files.
  * Fix digest authentication with URL arguments where value-less
    keys are given before the last argument.
  * Do not use shutdown() on listen socket if
    MHD_USE_PIPE_FOR_SHUTDOWN is set.</changelog>
  <changelog author="mpluskal@suse.com" date="1446379200">- Update to 0.9.45
  * Rework deprecation maros: fix errors with old GCC versions,
  improved support for old clang and new GCC. -EG
  * Return correct header kind in MHD_get_connection_values()
    even if a bitmask is used for the "kind" argument. -FC/CG
  * Fixing transient resource leak affecting long-lived
    connections with many keep-alives and HTTP request
    pipelining under certain circumstances (which reduced
    the receive window).
  * Fixed assertion failure triggered by a race in
    thread-per-connection mode on shutdown in rare
    circumstances. -CG
  * Deduplicate code between digestauth and connection
    parsing logic for URI arguments, shared code moved
    to new MHD_parse_arguments_ function in internal.c. -CG</changelog>
  <changelog author="mpluskal@suse.com" date="1447156800">- Update to 0.9.46
  * Undoing change from Sun Oct 25 15:29:23 CET 2015 as the
  original code was counter-intuitive but correct, and the new
  code does break pipelining. Ignore empty lines at the beginning
  of an HTTP request (more tolerant implementation).</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Enable http2/spdy
- Don't build examples as we don't ship them anyway
- Disable tests as linking fails for them with spdy enabled</changelog>
  <changelog author="mpluskal@suse.com" date="1449316800">- Update to 0.9.47
  * Reworked VS project files. Used x64 build tools by
  efault, many optimizations, fixes.
  dded project files for VS 2015. -EG
  * SPDY is dead, killing experimental libmicrospdy. -CG
  * New logic for controlling socket buffer modes.
  Eliminated delay before last packet in response and before
  "100 Continue" response on all platforms. Also response
  header are pushed to client without waiting for response
  body. -EG
  * Remove 200ms delay observable with keep-alive on Darwin
  and *BSD platfroms. -EG
  * Fix issue with shutdown if connection was resumed just
  before shutdown. -FC
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.9.48
  * Improved compatibility with VS2010 and other older compilers.
  * Default backlog size for listen socket was changed from 32 to
  SOMAXCONN, added new option MHD_OPTION_LISTEN_BACKLOG_SIZE to
  override default backlog size.
  * If not all connections can be handled by MHD_select() than at
  least some of connections will be processed instead of failing
  without any processing.
  * Fixed redefenition of FD_SETSIZE on W32 so select() will work
  with 2000 connections instead of 64.
  * Better handled redefenition of FD_SETSIZE on all platforms.
  * Close sockets more aggressively in multi-threaded mode
  (possibly relevant for idle servers).
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1460635200">- Update to 0.9.49
  * See provided Changelog for details
- Fix typo in previous changelog entry
- Refresh patches
- Use pkgconfig style dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1464955200">- Update to version 0.9.50:
  * See provided Changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1481544000">- Version update to 0.9.52:
  * See provided Changelog for details
- Refresh patch:
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Do not abort on failing tests, as they randomly fail quite a lot
  bsc#1012840</changelog>
  <changelog author="mpluskal@suse.com" date="1492084800">- Update to version 0.9.53:
  * See provided Changelog for details
- Refresh patch:
  * libmicrohttpd_test_data.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1494504000">- Update to version 0.9.54:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1494849600">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Version update to 0.9.55 bsc#1041216:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Update to version 0.9.57:
  * See provided Changelog for details
- Drop no longer needed patches:
  * libmicrohttpd_test_data.patch
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Install copying</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1677672000">- Apply patch for bsc#1208745 CVE-2023-27371
  fix parser bug that could be used to crash servers using the MHD_PostProcessor
  * fix-parser-bug-MHD_PostProcessor.patch</changelog>
</package>
<package pkgid="dcb54646950cbdf935ccf8f4e85b64dc9ea39e96d08a6ab36ee08200c0997833" name="libmicrohttpd12" arch="aarch64">
  <version epoch="0" ver="0.9.57" rel="150000.3.3.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1436788800">- fix build for SLES11:
  * update disable-stalling-test.patch: Instead of disabling testcase
  in Makefile disable testcases in code, this could be even better
  we can disable only broken test but not the whole testcase.
  * add libmicrohttpd_test_session.patch: Disable test relying on
  available libcurl version
  (see https://gnunet.org/bugs/view.php?id=3893 for details)
  * wrap libmicrosdpy into macro to disable building on
  systems with openssl &lt; 1.0.1
- update to 0.9.42:
  * fix off-by-one in MHD_start_daemon_va() error handling logic
  * fix #3784: actually implement MHD_CONNECTION_INFO_SOCKET_CONTEXT</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1436961600">- fux build for SLES11:
  * explicitly require libgnutls-devel in -devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1442664000">- Update to 0.9.43
  * Call resume_suspended_connections() when the user is running
    its own mainloop and calls MHD_run_from_select() to support
    resuming connections with external select. -FC
  * Correct documentation as to when MHD_USE_EPOLL_LINUX_ONLY
    is allowed. -CG
  * Reimplement monotonic clock functions for better
    support various platforms.
    Print more information during configure. -EG
  * Export MHD_get_reason_phrase_for() symbol. -CG
  * Added checks for overflows and buffer overruns, fixed
    possible buffer overrun. Updated md5 implementation.
    Fixed many compiler warning (mostly for VC compiler). -EG
  * Fix failure to properly clean up timed out connections
    if running in external select mode without listen socket,
    which caused busy waiting until new connections arrived.
    (Fixes #3924, thanks to slimp for reporting and testcase). -CG
  * Ignore close() errors on sockets except for EBADF,
    fixes #3926. -CG
  * Make sure to decrement connection counter before
    calling connection notifier so that
    MHD_DAEMON_INFO_CURRENT_CONNECTIONS does not
    present stale information (relevant if this is
    used for termination detection of a daemon
    stopped via MHD_quiesce_daemon()). Thanks to
    Markus Doppelbauer for reporting. -CG
  * Fix (automatic) handling of HEAD requests with
    MHD_create_response_from_callback() and HTTP/1.1
    connection keep-alives. Thanks to Cristian Klein
    for reporting. -CG
  * Add new functions MHD_create_response_from_fd64() and
    MHD_create_response_from_fd_at_offset64(). -EG
  * Fixing memory leak in digest authentication. -AW
  * Add deprecation compiler messages for deprecated functions
    and macros. -EG
  * Fixing digest authentication when used in combination
    with escaped characters in URLs. -CG/AW
- Disable spdy support for now as spdylay is missing
- Drop libmicrohttpd_test_session.patch as it is fixed now</changelog>
  <changelog author="mpluskal@suse.com" date="1443787200">- Update to 0.9.44
  * Various fixes for W32 VS project files.
  * Fix digest authentication with URL arguments where value-less
    keys are given before the last argument.
  * Do not use shutdown() on listen socket if
    MHD_USE_PIPE_FOR_SHUTDOWN is set.</changelog>
  <changelog author="mpluskal@suse.com" date="1446379200">- Update to 0.9.45
  * Rework deprecation maros: fix errors with old GCC versions,
  improved support for old clang and new GCC. -EG
  * Return correct header kind in MHD_get_connection_values()
    even if a bitmask is used for the "kind" argument. -FC/CG
  * Fixing transient resource leak affecting long-lived
    connections with many keep-alives and HTTP request
    pipelining under certain circumstances (which reduced
    the receive window).
  * Fixed assertion failure triggered by a race in
    thread-per-connection mode on shutdown in rare
    circumstances. -CG
  * Deduplicate code between digestauth and connection
    parsing logic for URI arguments, shared code moved
    to new MHD_parse_arguments_ function in internal.c. -CG</changelog>
  <changelog author="mpluskal@suse.com" date="1447156800">- Update to 0.9.46
  * Undoing change from Sun Oct 25 15:29:23 CET 2015 as the
  original code was counter-intuitive but correct, and the new
  code does break pipelining. Ignore empty lines at the beginning
  of an HTTP request (more tolerant implementation).</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Enable http2/spdy
- Don't build examples as we don't ship them anyway
- Disable tests as linking fails for them with spdy enabled</changelog>
  <changelog author="mpluskal@suse.com" date="1449316800">- Update to 0.9.47
  * Reworked VS project files. Used x64 build tools by
  efault, many optimizations, fixes.
  dded project files for VS 2015. -EG
  * SPDY is dead, killing experimental libmicrospdy. -CG
  * New logic for controlling socket buffer modes.
  Eliminated delay before last packet in response and before
  "100 Continue" response on all platforms. Also response
  header are pushed to client without waiting for response
  body. -EG
  * Remove 200ms delay observable with keep-alive on Darwin
  and *BSD platfroms. -EG
  * Fix issue with shutdown if connection was resumed just
  before shutdown. -FC
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.9.48
  * Improved compatibility with VS2010 and other older compilers.
  * Default backlog size for listen socket was changed from 32 to
  SOMAXCONN, added new option MHD_OPTION_LISTEN_BACKLOG_SIZE to
  override default backlog size.
  * If not all connections can be handled by MHD_select() than at
  least some of connections will be processed instead of failing
  without any processing.
  * Fixed redefenition of FD_SETSIZE on W32 so select() will work
  with 2000 connections instead of 64.
  * Better handled redefenition of FD_SETSIZE on all platforms.
  * Close sockets more aggressively in multi-threaded mode
  (possibly relevant for idle servers).
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1460635200">- Update to 0.9.49
  * See provided Changelog for details
- Fix typo in previous changelog entry
- Refresh patches
- Use pkgconfig style dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1464955200">- Update to version 0.9.50:
  * See provided Changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1481544000">- Version update to 0.9.52:
  * See provided Changelog for details
- Refresh patch:
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Do not abort on failing tests, as they randomly fail quite a lot
  bsc#1012840</changelog>
  <changelog author="mpluskal@suse.com" date="1492084800">- Update to version 0.9.53:
  * See provided Changelog for details
- Refresh patch:
  * libmicrohttpd_test_data.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1494504000">- Update to version 0.9.54:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1494849600">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Version update to 0.9.55 bsc#1041216:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Update to version 0.9.57:
  * See provided Changelog for details
- Drop no longer needed patches:
  * libmicrohttpd_test_data.patch
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Install copying</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1677672000">- Apply patch for bsc#1208745 CVE-2023-27371
  fix parser bug that could be used to crash servers using the MHD_PostProcessor
  * fix-parser-bug-MHD_PostProcessor.patch</changelog>
</package>
<package pkgid="e91fb740d1007eb45f5925b6fee108bea251c4bbfbd1181b9c10cfd87117b908" name="libmicrohttpd12" arch="s390x">
  <version epoch="0" ver="0.9.57" rel="150000.3.3.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1436788800">- fix build for SLES11:
  * update disable-stalling-test.patch: Instead of disabling testcase
  in Makefile disable testcases in code, this could be even better
  we can disable only broken test but not the whole testcase.
  * add libmicrohttpd_test_session.patch: Disable test relying on
  available libcurl version
  (see https://gnunet.org/bugs/view.php?id=3893 for details)
  * wrap libmicrosdpy into macro to disable building on
  systems with openssl &lt; 1.0.1
- update to 0.9.42:
  * fix off-by-one in MHD_start_daemon_va() error handling logic
  * fix #3784: actually implement MHD_CONNECTION_INFO_SOCKET_CONTEXT</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1436961600">- fux build for SLES11:
  * explicitly require libgnutls-devel in -devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1442664000">- Update to 0.9.43
  * Call resume_suspended_connections() when the user is running
    its own mainloop and calls MHD_run_from_select() to support
    resuming connections with external select. -FC
  * Correct documentation as to when MHD_USE_EPOLL_LINUX_ONLY
    is allowed. -CG
  * Reimplement monotonic clock functions for better
    support various platforms.
    Print more information during configure. -EG
  * Export MHD_get_reason_phrase_for() symbol. -CG
  * Added checks for overflows and buffer overruns, fixed
    possible buffer overrun. Updated md5 implementation.
    Fixed many compiler warning (mostly for VC compiler). -EG
  * Fix failure to properly clean up timed out connections
    if running in external select mode without listen socket,
    which caused busy waiting until new connections arrived.
    (Fixes #3924, thanks to slimp for reporting and testcase). -CG
  * Ignore close() errors on sockets except for EBADF,
    fixes #3926. -CG
  * Make sure to decrement connection counter before
    calling connection notifier so that
    MHD_DAEMON_INFO_CURRENT_CONNECTIONS does not
    present stale information (relevant if this is
    used for termination detection of a daemon
    stopped via MHD_quiesce_daemon()). Thanks to
    Markus Doppelbauer for reporting. -CG
  * Fix (automatic) handling of HEAD requests with
    MHD_create_response_from_callback() and HTTP/1.1
    connection keep-alives. Thanks to Cristian Klein
    for reporting. -CG
  * Add new functions MHD_create_response_from_fd64() and
    MHD_create_response_from_fd_at_offset64(). -EG
  * Fixing memory leak in digest authentication. -AW
  * Add deprecation compiler messages for deprecated functions
    and macros. -EG
  * Fixing digest authentication when used in combination
    with escaped characters in URLs. -CG/AW
- Disable spdy support for now as spdylay is missing
- Drop libmicrohttpd_test_session.patch as it is fixed now</changelog>
  <changelog author="mpluskal@suse.com" date="1443787200">- Update to 0.9.44
  * Various fixes for W32 VS project files.
  * Fix digest authentication with URL arguments where value-less
    keys are given before the last argument.
  * Do not use shutdown() on listen socket if
    MHD_USE_PIPE_FOR_SHUTDOWN is set.</changelog>
  <changelog author="mpluskal@suse.com" date="1446379200">- Update to 0.9.45
  * Rework deprecation maros: fix errors with old GCC versions,
  improved support for old clang and new GCC. -EG
  * Return correct header kind in MHD_get_connection_values()
    even if a bitmask is used for the "kind" argument. -FC/CG
  * Fixing transient resource leak affecting long-lived
    connections with many keep-alives and HTTP request
    pipelining under certain circumstances (which reduced
    the receive window).
  * Fixed assertion failure triggered by a race in
    thread-per-connection mode on shutdown in rare
    circumstances. -CG
  * Deduplicate code between digestauth and connection
    parsing logic for URI arguments, shared code moved
    to new MHD_parse_arguments_ function in internal.c. -CG</changelog>
  <changelog author="mpluskal@suse.com" date="1447156800">- Update to 0.9.46
  * Undoing change from Sun Oct 25 15:29:23 CET 2015 as the
  original code was counter-intuitive but correct, and the new
  code does break pipelining. Ignore empty lines at the beginning
  of an HTTP request (more tolerant implementation).</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Enable http2/spdy
- Don't build examples as we don't ship them anyway
- Disable tests as linking fails for them with spdy enabled</changelog>
  <changelog author="mpluskal@suse.com" date="1449316800">- Update to 0.9.47
  * Reworked VS project files. Used x64 build tools by
  efault, many optimizations, fixes.
  dded project files for VS 2015. -EG
  * SPDY is dead, killing experimental libmicrospdy. -CG
  * New logic for controlling socket buffer modes.
  Eliminated delay before last packet in response and before
  "100 Continue" response on all platforms. Also response
  header are pushed to client without waiting for response
  body. -EG
  * Remove 200ms delay observable with keep-alive on Darwin
  and *BSD platfroms. -EG
  * Fix issue with shutdown if connection was resumed just
  before shutdown. -FC
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.9.48
  * Improved compatibility with VS2010 and other older compilers.
  * Default backlog size for listen socket was changed from 32 to
  SOMAXCONN, added new option MHD_OPTION_LISTEN_BACKLOG_SIZE to
  override default backlog size.
  * If not all connections can be handled by MHD_select() than at
  least some of connections will be processed instead of failing
  without any processing.
  * Fixed redefenition of FD_SETSIZE on W32 so select() will work
  with 2000 connections instead of 64.
  * Better handled redefenition of FD_SETSIZE on all platforms.
  * Close sockets more aggressively in multi-threaded mode
  (possibly relevant for idle servers).
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1460635200">- Update to 0.9.49
  * See provided Changelog for details
- Fix typo in previous changelog entry
- Refresh patches
- Use pkgconfig style dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1464955200">- Update to version 0.9.50:
  * See provided Changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1481544000">- Version update to 0.9.52:
  * See provided Changelog for details
- Refresh patch:
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Do not abort on failing tests, as they randomly fail quite a lot
  bsc#1012840</changelog>
  <changelog author="mpluskal@suse.com" date="1492084800">- Update to version 0.9.53:
  * See provided Changelog for details
- Refresh patch:
  * libmicrohttpd_test_data.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1494504000">- Update to version 0.9.54:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1494849600">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Version update to 0.9.55 bsc#1041216:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Update to version 0.9.57:
  * See provided Changelog for details
- Drop no longer needed patches:
  * libmicrohttpd_test_data.patch
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Install copying</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1677672000">- Apply patch for bsc#1208745 CVE-2023-27371
  fix parser bug that could be used to crash servers using the MHD_PostProcessor
  * fix-parser-bug-MHD_PostProcessor.patch</changelog>
</package>
<package pkgid="e4ab5c2a7a7a2ed4022c25803182a54a9bd97403a726f7add8690d4f664854ae" name="libmicrohttpd12" arch="x86_64">
  <version epoch="0" ver="0.9.57" rel="150000.3.3.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1436788800">- fix build for SLES11:
  * update disable-stalling-test.patch: Instead of disabling testcase
  in Makefile disable testcases in code, this could be even better
  we can disable only broken test but not the whole testcase.
  * add libmicrohttpd_test_session.patch: Disable test relying on
  available libcurl version
  (see https://gnunet.org/bugs/view.php?id=3893 for details)
  * wrap libmicrosdpy into macro to disable building on
  systems with openssl &lt; 1.0.1
- update to 0.9.42:
  * fix off-by-one in MHD_start_daemon_va() error handling logic
  * fix #3784: actually implement MHD_CONNECTION_INFO_SOCKET_CONTEXT</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1436961600">- fux build for SLES11:
  * explicitly require libgnutls-devel in -devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1442664000">- Update to 0.9.43
  * Call resume_suspended_connections() when the user is running
    its own mainloop and calls MHD_run_from_select() to support
    resuming connections with external select. -FC
  * Correct documentation as to when MHD_USE_EPOLL_LINUX_ONLY
    is allowed. -CG
  * Reimplement monotonic clock functions for better
    support various platforms.
    Print more information during configure. -EG
  * Export MHD_get_reason_phrase_for() symbol. -CG
  * Added checks for overflows and buffer overruns, fixed
    possible buffer overrun. Updated md5 implementation.
    Fixed many compiler warning (mostly for VC compiler). -EG
  * Fix failure to properly clean up timed out connections
    if running in external select mode without listen socket,
    which caused busy waiting until new connections arrived.
    (Fixes #3924, thanks to slimp for reporting and testcase). -CG
  * Ignore close() errors on sockets except for EBADF,
    fixes #3926. -CG
  * Make sure to decrement connection counter before
    calling connection notifier so that
    MHD_DAEMON_INFO_CURRENT_CONNECTIONS does not
    present stale information (relevant if this is
    used for termination detection of a daemon
    stopped via MHD_quiesce_daemon()). Thanks to
    Markus Doppelbauer for reporting. -CG
  * Fix (automatic) handling of HEAD requests with
    MHD_create_response_from_callback() and HTTP/1.1
    connection keep-alives. Thanks to Cristian Klein
    for reporting. -CG
  * Add new functions MHD_create_response_from_fd64() and
    MHD_create_response_from_fd_at_offset64(). -EG
  * Fixing memory leak in digest authentication. -AW
  * Add deprecation compiler messages for deprecated functions
    and macros. -EG
  * Fixing digest authentication when used in combination
    with escaped characters in URLs. -CG/AW
- Disable spdy support for now as spdylay is missing
- Drop libmicrohttpd_test_session.patch as it is fixed now</changelog>
  <changelog author="mpluskal@suse.com" date="1443787200">- Update to 0.9.44
  * Various fixes for W32 VS project files.
  * Fix digest authentication with URL arguments where value-less
    keys are given before the last argument.
  * Do not use shutdown() on listen socket if
    MHD_USE_PIPE_FOR_SHUTDOWN is set.</changelog>
  <changelog author="mpluskal@suse.com" date="1446379200">- Update to 0.9.45
  * Rework deprecation maros: fix errors with old GCC versions,
  improved support for old clang and new GCC. -EG
  * Return correct header kind in MHD_get_connection_values()
    even if a bitmask is used for the "kind" argument. -FC/CG
  * Fixing transient resource leak affecting long-lived
    connections with many keep-alives and HTTP request
    pipelining under certain circumstances (which reduced
    the receive window).
  * Fixed assertion failure triggered by a race in
    thread-per-connection mode on shutdown in rare
    circumstances. -CG
  * Deduplicate code between digestauth and connection
    parsing logic for URI arguments, shared code moved
    to new MHD_parse_arguments_ function in internal.c. -CG</changelog>
  <changelog author="mpluskal@suse.com" date="1447156800">- Update to 0.9.46
  * Undoing change from Sun Oct 25 15:29:23 CET 2015 as the
  original code was counter-intuitive but correct, and the new
  code does break pipelining. Ignore empty lines at the beginning
  of an HTTP request (more tolerant implementation).</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Enable http2/spdy
- Don't build examples as we don't ship them anyway
- Disable tests as linking fails for them with spdy enabled</changelog>
  <changelog author="mpluskal@suse.com" date="1449316800">- Update to 0.9.47
  * Reworked VS project files. Used x64 build tools by
  efault, many optimizations, fixes.
  dded project files for VS 2015. -EG
  * SPDY is dead, killing experimental libmicrospdy. -CG
  * New logic for controlling socket buffer modes.
  Eliminated delay before last packet in response and before
  "100 Continue" response on all platforms. Also response
  header are pushed to client without waiting for response
  body. -EG
  * Remove 200ms delay observable with keep-alive on Darwin
  and *BSD platfroms. -EG
  * Fix issue with shutdown if connection was resumed just
  before shutdown. -FC
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.9.48
  * Improved compatibility with VS2010 and other older compilers.
  * Default backlog size for listen socket was changed from 32 to
  SOMAXCONN, added new option MHD_OPTION_LISTEN_BACKLOG_SIZE to
  override default backlog size.
  * If not all connections can be handled by MHD_select() than at
  least some of connections will be processed instead of failing
  without any processing.
  * Fixed redefenition of FD_SETSIZE on W32 so select() will work
  with 2000 connections instead of 64.
  * Better handled redefenition of FD_SETSIZE on all platforms.
  * Close sockets more aggressively in multi-threaded mode
  (possibly relevant for idle servers).
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1460635200">- Update to 0.9.49
  * See provided Changelog for details
- Fix typo in previous changelog entry
- Refresh patches
- Use pkgconfig style dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1464955200">- Update to version 0.9.50:
  * See provided Changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1481544000">- Version update to 0.9.52:
  * See provided Changelog for details
- Refresh patch:
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Do not abort on failing tests, as they randomly fail quite a lot
  bsc#1012840</changelog>
  <changelog author="mpluskal@suse.com" date="1492084800">- Update to version 0.9.53:
  * See provided Changelog for details
- Refresh patch:
  * libmicrohttpd_test_data.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1494504000">- Update to version 0.9.54:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1494849600">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Version update to 0.9.55 bsc#1041216:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Update to version 0.9.57:
  * See provided Changelog for details
- Drop no longer needed patches:
  * libmicrohttpd_test_data.patch
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Install copying</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1677672000">- Apply patch for bsc#1208745 CVE-2023-27371
  fix parser bug that could be used to crash servers using the MHD_PostProcessor
  * fix-parser-bug-MHD_PostProcessor.patch</changelog>
</package>
<package pkgid="ab7d1f29b59295a8a4cc4da6d0188b4cb93e846261292e78546aaca82e620d94" name="libmlx4-1" arch="aarch64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="3649abc2a0b53c98f952044f4b2729574ce56d00615c873a80c7bc1c0341cf02" name="libmlx4-1" arch="s390x">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="45c41b627c9aba6381a52a5657dd41805bf1fcd27aec4d3b637fdc386fe08286" name="libmlx4-1" arch="x86_64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="3e1b3d3a3fe45e879edcf1221ab01f402f00d48d90002d6e7c3c6eccd4146e63" name="libmlx5-1" arch="aarch64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="eab5067cf9de6ac403f5d6d9b3996669e05e8c25d4aedb8fe0c23343ea45658c" name="libmlx5-1" arch="s390x">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="e2e040b122ce438ecd9d6c23fbe334290024438dae38dcfb139bd5598d8d2309" name="libmlx5-1" arch="x86_64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="0fb3200e228f5b8a7b21f28534ef11277f4fee9e197e030e1264730413bc8dc0" name="libmount1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="cc080494128dfd8f344efdeed7a577968eb574146387ad11fe9c24509e832c03" name="libmount1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="10935d901b2194c5f9cf5e584e161996a5fb5faddd0d696c788384f6f277194a" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="e7481ba479168581ee9ef01db890e9432638afa966b00adb27e1639384071a6d" name="libncurses6" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="05261a2b6fcf23a2c936fb7f5b0136731fefc7d2b7befaa24344cc86bb515ae2" name="libncurses6" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="c5e0a1cf0273432fdd42b6e59b4da3370d8a520f8aa0925bf2a820ff8ac58f33" name="libncurses6" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="460995863d452e0bd9278f42e83cd6bb29cfa1be5ee80e71f4e5613111d53306" name="libndctl6" arch="x86_64">
  <version epoch="0" ver="71.1" rel="150400.10.3.1"/>
  <changelog author="msuchanek@suse.com" date="1565956800">- ndctl/list: Introduce region capability objects (bsc#1145772 ltc#178159).
  + ndctl-list-Introduce-region-capability-objects.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1566216000">- ndctl: Use the same align value as original namespace on reconfigure (bsc#1145577 ltc#178224).
  + ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
- ndctl/lib: Fix duplicate bus detection (bsc#1145573 ltc#180249).
  + ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1566216001">- ndctl/namespace: Handle 'create-namespace' in label-less mode (bsc#1145471 ltc#179886).
  + ndctl-namespace-Handle-create-namespace-in-label-less-mode.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1566388800">- Refresh patches with upstream status:
  ndctl_check_Ensure_mmap_of_BTT_sections_work_with_64K_page-sizes.patch
  ndctl-namespace-Handle-create-namespace-in-label-less-mode.patch
  ndctl-list-Introduce-region-capability-objects.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1571400000">- Refresh patches with upstream status:
  ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
  ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1573214400">- ndctl/dimm: Fix init-labels success reporting (bsc#1156308 ltc#181441).
  + ndctl-dimm-Fix-init-labels-success-reporting.patch
- Refresh patches with upstream status:
  ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
  ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1583236800">- ndctl/test: Relax dax_pmem_compat requirement (bsc#1159523)
  + ndctl-test-Relax-dax_pmem_compat-requirement.patch
- Add -fcommon flag on Tumbleweed (boo#1160286).
- Fix 'ndctl enable-namespace all' fails trying to enable idle namespaces
  (bsc#1165509 ltc#182068).
  + ndctl-namespace-Fix-enable-namespace-error-for-seed-.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1585915200">- ndctl/namespace: Skip zero namespaces when processing all namespaces
  (bsc#1167861, bsc#1165509, ltc#182068).
  + ndctl-namespace-skip-zero-namespaces-when-processing.patch
- Refresh patch to upstream version:
  ndctl-test-Relax-dax_pmem_compat-requirement.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1589544000">- Update to v68:
  * zero-labels: display an error if regions are active
  * destroy-namespace: fix seed namespace accounting
  * list: drop named list objects from verbose listing
  * *-namespace: emit better errors on failure
  * read-infoblock: new command to read an infoblock
  * write-infoblock: new command to create and write an infoblock
  * create-namespace: add --continue option
  * daxctl-reconfigure-device: add --no-movable option
  * daxctl-reconfigure-device: display movable state in listings
  * daxctl-reconfigure-device: detect races in memory onlining
  * security: support for 'security frozen' attribute
  * daxctl-reconfigure-device: new command for device mode management
  * daxctl-{on,off}line-memory: new commands for devices in system-ram mode
  * monitor: logging improvements, allow sending to background
  * inject-error: refuse to operate on activew BTT namespaces
  * *-labels: improvements to minimize data transfer
  * create-namespace: usability improvements around region search
- Removed ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
- Removed ndctl-dimm-Fix-init-labels-success-reporting.patch
- Removed ndctl-list-Introduce-region-capability-objects.patch
- Removed ndctl-namespace-Fix-enable-namespace-error-for-seed-.patch
- Removed ndctl-namespace-Handle-create-namespace-in-label-less-mode.patch
- Removed ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch
- Removed ndctl-test-Relax-dax_pmem_compat-requirement.patch
- Removed ndctl_check_Ensure_mmap_of_BTT_sections_work_with_64K_page-sizes.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1594728000">- Clarify documentation about filtering options (bsc#1173861)
  + ndctl-Documentation-use-includes-in-more-ndctl-command-pag.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1597060800">- Update to v69 (jsc#SLE-13824, jsc#SLE-12770, jsc#SLE-15065, jsc#SLE-15484,
    jsc#SLE-15485, bsc#1175052, ltc#186863, bsc#1174969, ltc#185845):
  * infoblock: Set the default alignment to the platform alignment
  * libndctl/papr_scm: Add support for reporting "life_used_percentage" metric
  * Skip region filtering if numa_node attribute is not present
  * libndctl,papr_scm: Implement support for PAPR_PDSM_HEALTH
  * miscellaneous bugfixes
- Removed ndctl-Documentation-use-includes-in-more-ndctl-command-pag.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1598616000">- Suppress ENXIO when processing all namespaces (jsc#SLE-13321, bsc#1175851, ltc#187867).
  + ndctl-namespace-Suppress-ENXIO-when-processing-all-n.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1603281600">- Update to upstream v70.1 (jsc#SLE-13338).
  Adds firmware activation support.</changelog>
  <changelog author="msuchanek@suse.de" date="1609416000">- Update to upstream v71 (jsc#SLE-14344, bsc#1170384).
  - support for the new device-dax subdivision functionality added in Linux in
    v5.10, including ways to create smaller devdax devices using
    daxctl/libdaxctl, as well as creating, listing, and restoring from a config
    dump, 'mappings' on these devices.
  - miscellaneous bugfixes
- Fix documentation and license packaging</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 71.1:
  * ndctl/dimm: Attempt an abort upon firmware-update-busy status
  * ndctl/dimm: Fix submit_abort_firmware()</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1611316800">- Enable aarch64 build (bsc#1188502).</changelog>
  <changelog author="jsegitz@suse.com" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_ndctl-monitor.service.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf file to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="msuchanek@suse.com" date="1646654400">- Add support for reporting dirty shutdown count (jsc#SLE-18196).
  + 0016-libndctl-papr-Add-support-for-reporting-shutdown-cou.patch
  + 0009-libndctl-papr-Fix-probe-for-papr-scm-compatible-nvdi.patch
  + 0003-libndctl-Unify-adding-dimms-for-papr-and-nfit-famili.patch
- Merge fixes that went into v72 and v73
  - Documentation updates
    + 0015-ndctl-docs-Clarify-update-firwmware-activation-overf.patch
    + 0014-Documentation-ndctl-fix-self-reference-of-ndctl-disa.patch
    + 0013-daxctl-Add-Soft-Reservation-theory-of-operation.patch
    + 0008-ndctl-Update-nvdimm-mailing-list-address.patch
  - Label index block calculation fix
    + 0012-ndctl-dimm-Fix-label-index-block-calculations.patch
    + 0002-Expose-ndctl_bus_nfit_translate_spa-as-a-public-func.patch
  - Scrub fix
    + 0011-ndctl-scrub-Reread-scrub-engine-status-at-start.patch
    + 0010-ndctl-scrub-Stop-translating-return-values.patch
  - Add memblock count to JSON
    + 0007-daxctl-emit-counts-of-total-and-online-memblocks.patch
  - DAX disable fix
    + 0006-libndctl-check-for-active-system-ram-before-disablin.patch
    + 0005-libdaxctl-add-an-API-to-check-if-a-device-is-active.patch
    + 0001-ndctl-namespace-Fix-disable-namespace-accounting-rel.patch
  - DAX reconfigure fix
    + 0004-daxctl-fail-reconfigure-device-based-on-kernel-onlin.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1677067200">- Fix parsing NDCTL_TIMEOUT (bsc#1208548 ltc#199892)
    + ndctl-Fix-the-NDCTL_TIMEOUT-environment-variable-par.patch</changelog>
</package>
<package pkgid="09838658f95b66ab176cd4900faa7ef1fc3cb9b8e2dc48ab42a6ed5659a07008" name="libnftables1" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="014df8691a3e05f138e4f259dfb00de724a7d3e8ed5aee5f4cdf329e677e2c61" name="libnftables1" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="3ba96ba0f04dd8efe5758b40f89acd301ca992870ab3d817b592560f5a14e0e9" name="libnftables1" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="8567a65b1bf5f9b97d5bd62a76ac602f36dc22ee0f57bf38b54b961e27b7709d" name="libnm0" arch="aarch64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="ae92278da05bc576f502edd8280e36573f4248ba5147b5745e9a4786894419f7" name="libnm0" arch="s390x">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="63b02e38a2fa5d305ac6d66b094fd08a6e2561d92cf4313f903081fa2172dc0b" name="libnm0" arch="x86_64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="997cd6796a90ff44344dcc6b6abad243f3f36c5231005e3046e3732fe84ee695" name="libnvme" arch="src">
  <version epoch="0" ver="1.0+32.gb30ab4c96c2d" rel="150400.3.21.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- fabrics: Duplicate strings when merging configs (bsc#1205019)
  * add 0022-fabrics-Duplicate-strings-when-merging-configs.patch
- remove unused patch (duplicated of patch #0013)
  * remove 0022-json-schema-add-dhchap_key-details-to-host-section.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- export nvme_ctrl_is_peristent() (bsc#1205657)
  * add 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Fix import error in python-libnvme (bsc#1207159)
  * add 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- spec file: add %check target</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
  * remove 0022-fabrics-Duplicate-strings-when-merging-configs.patch
  * remove 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch
  * remove 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
- Print controller name for dis/connect command (git-fixes)
  * fabrics: Add nqn to connect/disconnect log entry
- Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
- Build documentation because shipped version is outdate</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix GC in Python binding (bsc#1209905 bsc#1209131)
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="7ce2da17a01439955c1eaf37bc34529dde78ce8d5061a5f82f473ef99053c3c1" name="libnvme1" arch="aarch64">
  <version epoch="0" ver="1.0+32.gb30ab4c96c2d" rel="150400.3.21.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- fabrics: Duplicate strings when merging configs (bsc#1205019)
  * add 0022-fabrics-Duplicate-strings-when-merging-configs.patch
- remove unused patch (duplicated of patch #0013)
  * remove 0022-json-schema-add-dhchap_key-details-to-host-section.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- export nvme_ctrl_is_peristent() (bsc#1205657)
  * add 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Fix import error in python-libnvme (bsc#1207159)
  * add 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- spec file: add %check target</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
  * remove 0022-fabrics-Duplicate-strings-when-merging-configs.patch
  * remove 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch
  * remove 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
- Print controller name for dis/connect command (git-fixes)
  * fabrics: Add nqn to connect/disconnect log entry
- Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
- Build documentation because shipped version is outdate</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix GC in Python binding (bsc#1209905 bsc#1209131)
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="0e2718a024a3827ac271f87e6d25e29658558e0015fd7644192be94ff0e63ef2" name="libnvme1" arch="s390x">
  <version epoch="0" ver="1.0+32.gb30ab4c96c2d" rel="150400.3.21.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- fabrics: Duplicate strings when merging configs (bsc#1205019)
  * add 0022-fabrics-Duplicate-strings-when-merging-configs.patch
- remove unused patch (duplicated of patch #0013)
  * remove 0022-json-schema-add-dhchap_key-details-to-host-section.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- export nvme_ctrl_is_peristent() (bsc#1205657)
  * add 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Fix import error in python-libnvme (bsc#1207159)
  * add 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- spec file: add %check target</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
  * remove 0022-fabrics-Duplicate-strings-when-merging-configs.patch
  * remove 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch
  * remove 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
- Print controller name for dis/connect command (git-fixes)
  * fabrics: Add nqn to connect/disconnect log entry
- Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
- Build documentation because shipped version is outdate</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix GC in Python binding (bsc#1209905 bsc#1209131)
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="a4a1b9ef6ebc20593ed3444e16e3084f7faaf05ef1270c0d708cd458f1ba9fa4" name="libnvme1" arch="x86_64">
  <version epoch="0" ver="1.0+32.gb30ab4c96c2d" rel="150400.3.21.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- fabrics: Duplicate strings when merging configs (bsc#1205019)
  * add 0022-fabrics-Duplicate-strings-when-merging-configs.patch
- remove unused patch (duplicated of patch #0013)
  * remove 0022-json-schema-add-dhchap_key-details-to-host-section.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- export nvme_ctrl_is_peristent() (bsc#1205657)
  * add 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Fix import error in python-libnvme (bsc#1207159)
  * add 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- spec file: add %check target</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
  * remove 0022-fabrics-Duplicate-strings-when-merging-configs.patch
  * remove 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch
  * remove 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
- Print controller name for dis/connect command (git-fixes)
  * fabrics: Add nqn to connect/disconnect log entry
- Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
- Build documentation because shipped version is outdate</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix GC in Python binding (bsc#1209905 bsc#1209131)
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="9b9e3759e7bcfd69129d4e6ea7903e4d716db46533a8c9998b5e2d2ebd86bf1a" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="7d4bafc1f9eb61e6fd765f7158874d406659c192a8d7d8ca12a3f65bf2a9faca" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="90e8f5b37e0cff4405d02a01105551eb627da93e0b40ed60202bd1c2da625664" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="caccb60072f0952007decc98cdd6385a314b45277a40581681db58afd28c7d56" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="1f514403f9eba9fc4e9354c17f540915e55ec526dd95bd55fa140a69ad862b28" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="7034f72a80d96bf996118d5b7a34d8508fb74532e4698c16e46230e4259a8d2c" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="9727897be2cd9d5a17fe9765f29adbdf2d8035f15b81b9611e726e0db4d35327" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="0b27e2a3c42c7c020a653e9b6e370250b8171a8d885ab18be721b0d25a804a0b" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="293665dbdf9329a00e710f81cde0dca62897dfa784978e65be7adcdc8cbc26bc" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="d80022850a91b27a147cab7b140f950c6a75f4b00c3e2688f6c8a70c37edea0d" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="a9946a90a5c844376ae9e7a8a81b3c7efde3882b619899ce70d05d0e9a541b27" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="f4eac11a9cd180c96ca03c757f12caedbeaeffc33a123739b364c1fe76db9cb8" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="db0c930cb81da0537f5127befefad025eae1253f46c541e9da031467bb38dbf9" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="196fdda5718e2690a0159a126e51d80da0c0aa0cd2a40e32fd76a6a13bc9b8e9" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="280471205e2f7a43fbcb47c6aeb723ec69410f8307a5c6af8e83e9fdc54f5f14" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="f6004750fb090494d9727acc42b15aef583dc7fc7027a63440271350381024b9" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="804bdd72f90f9529475a60ea171c95cd9e8d2088ae09cae4a2e017d4849bc472" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="f258d3dad8c9896481c0258f70f69639f5201f896318ccedcc89b23a6f0ae618" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="74c16b8398702319a08792e1cd222c0ec265e3cf962ac69266e8c3b0c3be6eb7" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="f27a7a5266e8277e88c62716ed30ca6f8c9de0b9a41a1e76385c576ce59c5f19" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="a34018fa7245fd4f46275015a5f4f47107492693b50fb4dc458e05ca35034b81" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="c3660619a440b7017c81d8faaf8f5e6d7e41c11d1598382be2cb51208d60f052" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="791221e67b51dd2fcb768b93b1878e5a65d269b2eb15c6d12dcf897ac4feeab5" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="5df39fb0dc8f8871e60e37065f109df29f4bd07c84099202304c0bed43c1c0d3" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="d738f410829c214c01ff6a98d92851410dd16d21f5bccc6d7f128e7d1157af39" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="581842e32bc2e7743bf9043827cafefe1488acb5c5fd57a364e9e960de9144ff" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="30583cc8801208b0b96ad56200ec6e11068c93ec8ae793603d5e8b96dcb652d9" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="f1576ed26127815901b4449fd698f9a3a8bfba69e32a99b4b8971399260faa71" name="libprocps7" arch="aarch64">
  <version epoch="0" ver="3.3.15" rel="150000.7.31.1"/>
  <changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.12-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.12-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
</package>
<package pkgid="92eadfa3e6eee968c8697640ecd853911afbedabea6304646d227ccb0e19552f" name="libprocps7" arch="s390x">
  <version epoch="0" ver="3.3.15" rel="150000.7.31.1"/>
  <changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.12-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.12-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
</package>
<package pkgid="813e076ef416d905db4a7b7895de5bac68246face1ee34fc09b2d5018b049a0a" name="libprocps7" arch="x86_64">
  <version epoch="0" ver="3.3.15" rel="150000.7.31.1"/>
  <changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.12-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.12-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
</package>
<package pkgid="1c7acf8e437af01d4809f7c757bdb6600bef4613e81596ef30af2a050a39b8c0" name="libprotobuf-lite20" arch="aarch64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="41475a2c85efe819d08457d4436cd51420b1c107afae0f4f3128889f7b15ee86" name="libprotobuf-lite20" arch="s390x">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="3e36d9fbf8a5482764e73f7f1999c480e3a4f4831f6ea6706354dfc703e8d600" name="libprotobuf-lite20" arch="x86_64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="52ba2aeec406365cd45198485df422d1a05476f3c78b5209a1c8b787a6217d28" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="186d4d170e7ed0f0c2d4358e698115d697f8baa19a9ee039d75fe079d97daa9a" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="cda6765cd8de9d6f3e440af1041441c7994d5bd1f37812951e3e47ee9ab11ee0" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="5164c151b5de2232be31aa9d6c78f4b7bcbdb9d5899bfef7e102edad4e7aff59" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="dcda3addd227f44a75c633b169a69b5f45957c2b570efbb6e9ea9a571eb712ff" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="bff1a5797066d946f9090f57299b621ba660557d43b9c2a0c31f39d6df4dbf2d" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="34852d0aea50770445945037a53b252741ba988e6fb24f3253ed66d8c51bc1f2" name="librados2" arch="aarch64">
  <version epoch="0" ver="16.2.11.58+g38d6afd3b78" rel="150400.3.6.1"/>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build
  + (bsc#1188911) OSD marked down causes wrong backfill_toofull</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
</package>
<package pkgid="52998835663cc7952cb7d130e104ea38287dd56932fcb7fcbc43a7c7050a4362" name="librados2" arch="x86_64">
  <version epoch="0" ver="16.2.11.58+g38d6afd3b78" rel="150400.3.6.1"/>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build
  + (bsc#1188911) OSD marked down causes wrong backfill_toofull</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
</package>
<package pkgid="11e2d461b8cc5e8f7bb2558bbaabbcf39e2f837436020196d1e2a454dee7aeab" name="librbd1" arch="aarch64">
  <version epoch="0" ver="16.2.11.58+g38d6afd3b78" rel="150400.3.6.1"/>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build
  + (bsc#1188911) OSD marked down causes wrong backfill_toofull</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
</package>
<package pkgid="ddd3eb68bc820edf88bc1fe1fb5c2af21ee3ee932a352efbda7772cc3f7be218" name="librbd1" arch="x86_64">
  <version epoch="0" ver="16.2.11.58+g38d6afd3b78" rel="150400.3.6.1"/>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build
  + (bsc#1188911) OSD marked down causes wrong backfill_toofull</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
</package>
<package pkgid="c3023f63e179ea6c3310b7d4c377974f395354009363390b087b088e347d83f0" name="librdmacm1" arch="aarch64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="742fd08399f74907b1ccaaca2a3fc8ee2f1228a338e49ac978a907d22ead2c8d" name="librdmacm1" arch="s390x">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="5ad732dd273ad5f4f3215caba3a3f08799d99f90c085cd5120a0c63347fda579" name="librdmacm1" arch="x86_64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="0510c16d5c147fd10ed1c4c902597097872a28c02bf72d71b341262aec65149e" name="libsgutils2-1_47-2" arch="aarch64">
  <version epoch="0" ver="1.47+13.75d23ac" rel="150400.3.6.1"/>
  <changelog author="hare@suse.de" date="1502452800">- Drop patch merged with git repository
  * drop add-lunsearch-filter-to-searchexisting.patch
- Drop rules included in git repository
  * drop 40-usb-blacklist.rules
- Update to latest svn snapshot:
  * sg_rdac: add sanity checks for -f=lun value
  * sg_vpd improvements
  * sg_ses: fix uninitialized struct
  * sg_luns: resync with SAM and SPC drafts
  * sg_vpd: fix struct misalignment introduced by --force
  * sg_logs: add --vendor and fixup enumeration
- Port patches from SLES:
  * Add systemd service files for LUN masking (bsc#954600)
  * 55-scsi-sg3_id.rules: handle VPD page 0x80 correctly (bsc#1006469)
  * scripts: added udev rules for legacy CCISS (bsc#1006175)
  * rescan-scsi-bus.sh: Add lunsearch filter to findresized()
  (bsc#1027176)
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063)
  * 55-scsi-sg3_id.rules: allow to override sysfs inquiry
  (bsc#1012523)
  * sg_inq: export all NAA values (bsc#1050767)
  * Silence gcc warnings</changelog>
  <changelog author="hare@suse.de" date="1507896000">- Update to svn r721:
  * Merge SUSE-specific patches with upstream svn
  * sg_write_atomic: add new program for WRITE ATOMIC
  * sg_bg_ctl: new background control command
  * sg_ses: Improve output and option handling
  * sg_logs: Add --vendor and decode more pages
  * sg_get_lba_status: add new program
  * Install rescan-scsi-bus.sh and scsi_logging_level per default</changelog>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
</package>
<package pkgid="e9d9affbeedaa585719ca2ddb9928e99de85f955bf6b25183a62c6df00a8d7af" name="libsgutils2-1_47-2" arch="s390x">
  <version epoch="0" ver="1.47+13.75d23ac" rel="150400.3.6.1"/>
  <changelog author="hare@suse.de" date="1502452800">- Drop patch merged with git repository
  * drop add-lunsearch-filter-to-searchexisting.patch
- Drop rules included in git repository
  * drop 40-usb-blacklist.rules
- Update to latest svn snapshot:
  * sg_rdac: add sanity checks for -f=lun value
  * sg_vpd improvements
  * sg_ses: fix uninitialized struct
  * sg_luns: resync with SAM and SPC drafts
  * sg_vpd: fix struct misalignment introduced by --force
  * sg_logs: add --vendor and fixup enumeration
- Port patches from SLES:
  * Add systemd service files for LUN masking (bsc#954600)
  * 55-scsi-sg3_id.rules: handle VPD page 0x80 correctly (bsc#1006469)
  * scripts: added udev rules for legacy CCISS (bsc#1006175)
  * rescan-scsi-bus.sh: Add lunsearch filter to findresized()
  (bsc#1027176)
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063)
  * 55-scsi-sg3_id.rules: allow to override sysfs inquiry
  (bsc#1012523)
  * sg_inq: export all NAA values (bsc#1050767)
  * Silence gcc warnings</changelog>
  <changelog author="hare@suse.de" date="1507896000">- Update to svn r721:
  * Merge SUSE-specific patches with upstream svn
  * sg_write_atomic: add new program for WRITE ATOMIC
  * sg_bg_ctl: new background control command
  * sg_ses: Improve output and option handling
  * sg_logs: Add --vendor and decode more pages
  * sg_get_lba_status: add new program
  * Install rescan-scsi-bus.sh and scsi_logging_level per default</changelog>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
</package>
<package pkgid="343e0aa49daae62516a57f6dd6b0e1ca0719fb51b3042bc2396567b26238390b" name="libsgutils2-1_47-2" arch="x86_64">
  <version epoch="0" ver="1.47+13.75d23ac" rel="150400.3.6.1"/>
  <changelog author="hare@suse.de" date="1502452800">- Drop patch merged with git repository
  * drop add-lunsearch-filter-to-searchexisting.patch
- Drop rules included in git repository
  * drop 40-usb-blacklist.rules
- Update to latest svn snapshot:
  * sg_rdac: add sanity checks for -f=lun value
  * sg_vpd improvements
  * sg_ses: fix uninitialized struct
  * sg_luns: resync with SAM and SPC drafts
  * sg_vpd: fix struct misalignment introduced by --force
  * sg_logs: add --vendor and fixup enumeration
- Port patches from SLES:
  * Add systemd service files for LUN masking (bsc#954600)
  * 55-scsi-sg3_id.rules: handle VPD page 0x80 correctly (bsc#1006469)
  * scripts: added udev rules for legacy CCISS (bsc#1006175)
  * rescan-scsi-bus.sh: Add lunsearch filter to findresized()
  (bsc#1027176)
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063)
  * 55-scsi-sg3_id.rules: allow to override sysfs inquiry
  (bsc#1012523)
  * sg_inq: export all NAA values (bsc#1050767)
  * Silence gcc warnings</changelog>
  <changelog author="hare@suse.de" date="1507896000">- Update to svn r721:
  * Merge SUSE-specific patches with upstream svn
  * sg_write_atomic: add new program for WRITE ATOMIC
  * sg_bg_ctl: new background control command
  * sg_ses: Improve output and option handling
  * sg_logs: Add --vendor and decode more pages
  * sg_get_lba_status: add new program
  * Install rescan-scsi-bus.sh and scsi_logging_level per default</changelog>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
</package>
<package pkgid="ba732292891c5261ca94b5d11be0d7fa8db6fc3ed04b8bdd22b14693da5dd003" name="libsigc++2" arch="src">
  <version epoch="0" ver="2.10.7" rel="150400.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 2.6.2:
  + slot: Handle auto-disconnection when a slot contains a slot
    (bgo#755003).
  + slot and signal: Correct move constructors and move
    assignments (bgo#756484).
  + trackable, slot_base, signal_base, connection: Add some
    noexcept specs (bgo#756484).
  + trackable, slot, signal: Remove noexcept from move operations
    (bgo#756484).
  + slot and signal: Add missing move constructors and move
    assignments (bgo#756484).
  + signal_impl: =delete copy and move operations (bgo#756484).
  + typed_slot_rep: =delete unimplemented copy and move operations
    (bgo#756484).
  + slot_rep: =delete copy and move operations (bgo#756484).</changelog>
  <changelog author="dimstar@opensuse.org" date="1454587200">- Add libsigc++-std-c11.patch: Add -std=c11 to CFLAGS in the .pc
  file. This allows other packages building against libsigc++ to
  be aware of the C11 requirement we bring. libsigc++ itself checks
  for the availability during configure, so it is safe to pass this
  requirement on.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.7.1:
  + signal: Add a moving connect() method, taking an rvalue
    reference to a slot (bgo#756484).
  + can_deduce_result_type_with_decltype: Rename the check()
    methods to checksize(). check() is a preprocessor macro in Mac
    OS X (bgo#759315).
  + Temporarily undefine the nil macro, if it's defined. nil is a
    preprocessor macro in Objective-C++ and Mac OS X (bgo#695235).
  + Correct the mem_functor&lt;&gt; declarations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457784000">- Update to version 2.7.2:
  + Deprecate sigc::ref() and sigc::reference_wrapper(), adding
    support instead for std::ref(), std::cref(), and
    std::reference_wrapper().
  + mem_fun(): Deprecate mem_fun(pointer, func). Leaving just
    mem_fun(reference, func) (bgo#763215).
  + Make all operator bool() explicit. (A C++11 feature).
  + Build:
  - Remove some now-unnecessary configure checks (bgo#762065).
  - Update MSVC project.
  + Documentation: Improve the documentation of mem_fun(), making
    it clear that mem_fun() does not return a slot.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 2.8.0:
  + Documentation: Mention use with CMake.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078400">- No longer apply libsigc++-std-c11.patch for Tumbleweed, not
  needed anymore since GCC 6.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078401">- Update to version 2.9.2:
  + Minor documentation improvements.
  + Some more minor uses of C++11 syntax.
- Changes from version 2.9.1:
  + slot: Allow sigc::slot&lt;R(Args...)&gt; syntax, like std::function,
    deprecating the sigc::slot&lt;R, Args...&gt; syntax (bgo#763393).
  + signal: Allow sigc::signal&lt;R(Args...)&gt; syntax, like
    std::function, deprecating the sigc::signal&lt;R, Args...&gt; syntax
    (bgo#763393).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467806400">- Update to version 2.9.3:
  + signal:
  - Deprecate slots().
  - Deprecate emit_reverse().
  + Benchmark: Update it and use boost::timer, and actually build
    it, but not built by default.
  + Build: Fix the build on MSVC++ 2013 and 2015 (bgo#767777).</changelog>
  <changelog author="dimstar@opensuse.org" date="1474372800">- Update to version 2.10.0:
  + Fix silent builds (bgo#768797).</changelog>
  <changelog author="jengelh@inai.de" date="1480939200">- RPM group reassignment
- Drop --with-pic, we build no static libs for which it is meant</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543579200">- Update to version 2.10.1:
  + signal_impl::clear(): Don't clear the slot list during signal
    emission, to prevent a segfault. And add a test for this.
  + slot_base::set_parent(): Create a dummy slot_rep if necessary.
  + Avoid compiler warnings from function pointer conversions.
  + Build:
  - Make --disable-benchmark work.
  - Replace the Visual Studio project files with MSVC NMake
    project files.
  - Add MSVC_NMake/README.txt for Visual Studio builds.
  + Documentation:
  - signal_base: Warn against deletion during emission.
  - Update links in README, configure.ac, libsigcplusplus.doap.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565784000">- Update to version 2.10.2:
  + This release is identical to 2.10.1, except for: Reference docs
    generated by Doxygen 1.8.11. Hopefully it will show up at
    https://developer.gnome.org/libsigc++/stable/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567857600">- Drop conditional libsigc++-std-c11.patch: No longer needed for
  any currently supported version of openSUSE.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585137600">- Update to version 2.10.3:
  + Add Meson build, alongside the existing Autotools build.
  + Improve MSVC builds on Windows.
  + meson.build: Check if .git is a directory or file.
  + docs/reference/meson.build: Check if perl is found.
  + README: Describe building with Meson and Autotools.
  + Tests: Make test_track_obj.cc compile with clang++.</changelog>
  <changelog author="dimstar@opensuse.org" date="1601985600">- Update to version 2.10.4:
  + Build:
  - Meson build: Set default value of the 'warnings' option to
    'min'
  - NMake Makefiles: Several improvements
  - docs/reference/: Update for Doxygen &gt;= 1.8.16
  + Updated documentation.
- Switch to meson build system:
  + Add meson, and remove m4 BuildRequires.
  + Replace configure/make/make_install with
    meson/meson_build/meson_install macros.
  + No longer ship the htmldoc as part of the devel package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1606305600">- Update to version 2.10.6:
  + Build: Meson build: Fix versioning on macOS.
  + Documentation:
  - sigc++/sigc++.h: Describe how to use libsigc++ with Meson.
  - Update links to the web page, now at
    libsigcplusplus.github.io/libsigcplusplus.</changelog>
  <changelog author="dimstar@opensuse.org" date="1621598400">- Update to version 2.10.7:
  + Meson build:
  - Make it possible to use sigc++ as a subproject.
  - Fix dependency on files generated from .h.m4 files.
  - No implicit_include_directories.
  - Make quiet installations possible.
  - Fix build as subproject without building documentation.
  + Documentation fixes.</changelog>
  <changelog author="qzhao@suse.com" date="1681732800">- Add libsigc++2-remove-unnecessary-executable-flag-from-file.patch:
  cancel executable permission for file
  /usr/share/doc/packages/libsigc-2_0-0/NEWS(bsc#1209094,bsc#1209140).</changelog>
</package>
<package pkgid="431b6a7c8a504da84326013fc1572f9e78524d81229380f1d7e856762b8942bd" name="libsigc-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.10.7" rel="150400.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 2.6.2:
  + slot: Handle auto-disconnection when a slot contains a slot
    (bgo#755003).
  + slot and signal: Correct move constructors and move
    assignments (bgo#756484).
  + trackable, slot_base, signal_base, connection: Add some
    noexcept specs (bgo#756484).
  + trackable, slot, signal: Remove noexcept from move operations
    (bgo#756484).
  + slot and signal: Add missing move constructors and move
    assignments (bgo#756484).
  + signal_impl: =delete copy and move operations (bgo#756484).
  + typed_slot_rep: =delete unimplemented copy and move operations
    (bgo#756484).
  + slot_rep: =delete copy and move operations (bgo#756484).</changelog>
  <changelog author="dimstar@opensuse.org" date="1454587200">- Add libsigc++-std-c11.patch: Add -std=c11 to CFLAGS in the .pc
  file. This allows other packages building against libsigc++ to
  be aware of the C11 requirement we bring. libsigc++ itself checks
  for the availability during configure, so it is safe to pass this
  requirement on.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.7.1:
  + signal: Add a moving connect() method, taking an rvalue
    reference to a slot (bgo#756484).
  + can_deduce_result_type_with_decltype: Rename the check()
    methods to checksize(). check() is a preprocessor macro in Mac
    OS X (bgo#759315).
  + Temporarily undefine the nil macro, if it's defined. nil is a
    preprocessor macro in Objective-C++ and Mac OS X (bgo#695235).
  + Correct the mem_functor&lt;&gt; declarations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457784000">- Update to version 2.7.2:
  + Deprecate sigc::ref() and sigc::reference_wrapper(), adding
    support instead for std::ref(), std::cref(), and
    std::reference_wrapper().
  + mem_fun(): Deprecate mem_fun(pointer, func). Leaving just
    mem_fun(reference, func) (bgo#763215).
  + Make all operator bool() explicit. (A C++11 feature).
  + Build:
  - Remove some now-unnecessary configure checks (bgo#762065).
  - Update MSVC project.
  + Documentation: Improve the documentation of mem_fun(), making
    it clear that mem_fun() does not return a slot.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 2.8.0:
  + Documentation: Mention use with CMake.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078400">- No longer apply libsigc++-std-c11.patch for Tumbleweed, not
  needed anymore since GCC 6.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078401">- Update to version 2.9.2:
  + Minor documentation improvements.
  + Some more minor uses of C++11 syntax.
- Changes from version 2.9.1:
  + slot: Allow sigc::slot&lt;R(Args...)&gt; syntax, like std::function,
    deprecating the sigc::slot&lt;R, Args...&gt; syntax (bgo#763393).
  + signal: Allow sigc::signal&lt;R(Args...)&gt; syntax, like
    std::function, deprecating the sigc::signal&lt;R, Args...&gt; syntax
    (bgo#763393).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467806400">- Update to version 2.9.3:
  + signal:
  - Deprecate slots().
  - Deprecate emit_reverse().
  + Benchmark: Update it and use boost::timer, and actually build
    it, but not built by default.
  + Build: Fix the build on MSVC++ 2013 and 2015 (bgo#767777).</changelog>
  <changelog author="dimstar@opensuse.org" date="1474372800">- Update to version 2.10.0:
  + Fix silent builds (bgo#768797).</changelog>
  <changelog author="jengelh@inai.de" date="1480939200">- RPM group reassignment
- Drop --with-pic, we build no static libs for which it is meant</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543579200">- Update to version 2.10.1:
  + signal_impl::clear(): Don't clear the slot list during signal
    emission, to prevent a segfault. And add a test for this.
  + slot_base::set_parent(): Create a dummy slot_rep if necessary.
  + Avoid compiler warnings from function pointer conversions.
  + Build:
  - Make --disable-benchmark work.
  - Replace the Visual Studio project files with MSVC NMake
    project files.
  - Add MSVC_NMake/README.txt for Visual Studio builds.
  + Documentation:
  - signal_base: Warn against deletion during emission.
  - Update links in README, configure.ac, libsigcplusplus.doap.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565784000">- Update to version 2.10.2:
  + This release is identical to 2.10.1, except for: Reference docs
    generated by Doxygen 1.8.11. Hopefully it will show up at
    https://developer.gnome.org/libsigc++/stable/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567857600">- Drop conditional libsigc++-std-c11.patch: No longer needed for
  any currently supported version of openSUSE.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585137600">- Update to version 2.10.3:
  + Add Meson build, alongside the existing Autotools build.
  + Improve MSVC builds on Windows.
  + meson.build: Check if .git is a directory or file.
  + docs/reference/meson.build: Check if perl is found.
  + README: Describe building with Meson and Autotools.
  + Tests: Make test_track_obj.cc compile with clang++.</changelog>
  <changelog author="dimstar@opensuse.org" date="1601985600">- Update to version 2.10.4:
  + Build:
  - Meson build: Set default value of the 'warnings' option to
    'min'
  - NMake Makefiles: Several improvements
  - docs/reference/: Update for Doxygen &gt;= 1.8.16
  + Updated documentation.
- Switch to meson build system:
  + Add meson, and remove m4 BuildRequires.
  + Replace configure/make/make_install with
    meson/meson_build/meson_install macros.
  + No longer ship the htmldoc as part of the devel package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1606305600">- Update to version 2.10.6:
  + Build: Meson build: Fix versioning on macOS.
  + Documentation:
  - sigc++/sigc++.h: Describe how to use libsigc++ with Meson.
  - Update links to the web page, now at
    libsigcplusplus.github.io/libsigcplusplus.</changelog>
  <changelog author="dimstar@opensuse.org" date="1621598400">- Update to version 2.10.7:
  + Meson build:
  - Make it possible to use sigc++ as a subproject.
  - Fix dependency on files generated from .h.m4 files.
  - No implicit_include_directories.
  - Make quiet installations possible.
  - Fix build as subproject without building documentation.
  + Documentation fixes.</changelog>
  <changelog author="qzhao@suse.com" date="1681732800">- Add libsigc++2-remove-unnecessary-executable-flag-from-file.patch:
  cancel executable permission for file
  /usr/share/doc/packages/libsigc-2_0-0/NEWS(bsc#1209094,bsc#1209140).</changelog>
</package>
<package pkgid="28554b29cfa776e04c34e2a77b2e4b111b44adcb7e7de4cf7729be88977f811d" name="libsigc-2_0-0" arch="s390x">
  <version epoch="0" ver="2.10.7" rel="150400.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 2.6.2:
  + slot: Handle auto-disconnection when a slot contains a slot
    (bgo#755003).
  + slot and signal: Correct move constructors and move
    assignments (bgo#756484).
  + trackable, slot_base, signal_base, connection: Add some
    noexcept specs (bgo#756484).
  + trackable, slot, signal: Remove noexcept from move operations
    (bgo#756484).
  + slot and signal: Add missing move constructors and move
    assignments (bgo#756484).
  + signal_impl: =delete copy and move operations (bgo#756484).
  + typed_slot_rep: =delete unimplemented copy and move operations
    (bgo#756484).
  + slot_rep: =delete copy and move operations (bgo#756484).</changelog>
  <changelog author="dimstar@opensuse.org" date="1454587200">- Add libsigc++-std-c11.patch: Add -std=c11 to CFLAGS in the .pc
  file. This allows other packages building against libsigc++ to
  be aware of the C11 requirement we bring. libsigc++ itself checks
  for the availability during configure, so it is safe to pass this
  requirement on.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.7.1:
  + signal: Add a moving connect() method, taking an rvalue
    reference to a slot (bgo#756484).
  + can_deduce_result_type_with_decltype: Rename the check()
    methods to checksize(). check() is a preprocessor macro in Mac
    OS X (bgo#759315).
  + Temporarily undefine the nil macro, if it's defined. nil is a
    preprocessor macro in Objective-C++ and Mac OS X (bgo#695235).
  + Correct the mem_functor&lt;&gt; declarations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457784000">- Update to version 2.7.2:
  + Deprecate sigc::ref() and sigc::reference_wrapper(), adding
    support instead for std::ref(), std::cref(), and
    std::reference_wrapper().
  + mem_fun(): Deprecate mem_fun(pointer, func). Leaving just
    mem_fun(reference, func) (bgo#763215).
  + Make all operator bool() explicit. (A C++11 feature).
  + Build:
  - Remove some now-unnecessary configure checks (bgo#762065).
  - Update MSVC project.
  + Documentation: Improve the documentation of mem_fun(), making
    it clear that mem_fun() does not return a slot.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 2.8.0:
  + Documentation: Mention use with CMake.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078400">- No longer apply libsigc++-std-c11.patch for Tumbleweed, not
  needed anymore since GCC 6.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078401">- Update to version 2.9.2:
  + Minor documentation improvements.
  + Some more minor uses of C++11 syntax.
- Changes from version 2.9.1:
  + slot: Allow sigc::slot&lt;R(Args...)&gt; syntax, like std::function,
    deprecating the sigc::slot&lt;R, Args...&gt; syntax (bgo#763393).
  + signal: Allow sigc::signal&lt;R(Args...)&gt; syntax, like
    std::function, deprecating the sigc::signal&lt;R, Args...&gt; syntax
    (bgo#763393).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467806400">- Update to version 2.9.3:
  + signal:
  - Deprecate slots().
  - Deprecate emit_reverse().
  + Benchmark: Update it and use boost::timer, and actually build
    it, but not built by default.
  + Build: Fix the build on MSVC++ 2013 and 2015 (bgo#767777).</changelog>
  <changelog author="dimstar@opensuse.org" date="1474372800">- Update to version 2.10.0:
  + Fix silent builds (bgo#768797).</changelog>
  <changelog author="jengelh@inai.de" date="1480939200">- RPM group reassignment
- Drop --with-pic, we build no static libs for which it is meant</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543579200">- Update to version 2.10.1:
  + signal_impl::clear(): Don't clear the slot list during signal
    emission, to prevent a segfault. And add a test for this.
  + slot_base::set_parent(): Create a dummy slot_rep if necessary.
  + Avoid compiler warnings from function pointer conversions.
  + Build:
  - Make --disable-benchmark work.
  - Replace the Visual Studio project files with MSVC NMake
    project files.
  - Add MSVC_NMake/README.txt for Visual Studio builds.
  + Documentation:
  - signal_base: Warn against deletion during emission.
  - Update links in README, configure.ac, libsigcplusplus.doap.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565784000">- Update to version 2.10.2:
  + This release is identical to 2.10.1, except for: Reference docs
    generated by Doxygen 1.8.11. Hopefully it will show up at
    https://developer.gnome.org/libsigc++/stable/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567857600">- Drop conditional libsigc++-std-c11.patch: No longer needed for
  any currently supported version of openSUSE.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585137600">- Update to version 2.10.3:
  + Add Meson build, alongside the existing Autotools build.
  + Improve MSVC builds on Windows.
  + meson.build: Check if .git is a directory or file.
  + docs/reference/meson.build: Check if perl is found.
  + README: Describe building with Meson and Autotools.
  + Tests: Make test_track_obj.cc compile with clang++.</changelog>
  <changelog author="dimstar@opensuse.org" date="1601985600">- Update to version 2.10.4:
  + Build:
  - Meson build: Set default value of the 'warnings' option to
    'min'
  - NMake Makefiles: Several improvements
  - docs/reference/: Update for Doxygen &gt;= 1.8.16
  + Updated documentation.
- Switch to meson build system:
  + Add meson, and remove m4 BuildRequires.
  + Replace configure/make/make_install with
    meson/meson_build/meson_install macros.
  + No longer ship the htmldoc as part of the devel package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1606305600">- Update to version 2.10.6:
  + Build: Meson build: Fix versioning on macOS.
  + Documentation:
  - sigc++/sigc++.h: Describe how to use libsigc++ with Meson.
  - Update links to the web page, now at
    libsigcplusplus.github.io/libsigcplusplus.</changelog>
  <changelog author="dimstar@opensuse.org" date="1621598400">- Update to version 2.10.7:
  + Meson build:
  - Make it possible to use sigc++ as a subproject.
  - Fix dependency on files generated from .h.m4 files.
  - No implicit_include_directories.
  - Make quiet installations possible.
  - Fix build as subproject without building documentation.
  + Documentation fixes.</changelog>
  <changelog author="qzhao@suse.com" date="1681732800">- Add libsigc++2-remove-unnecessary-executable-flag-from-file.patch:
  cancel executable permission for file
  /usr/share/doc/packages/libsigc-2_0-0/NEWS(bsc#1209094,bsc#1209140).</changelog>
</package>
<package pkgid="f092b3d726e36c7aa6f4f62a9dfb699c7ffa6cd3b77de939233f2a8b302de7f5" name="libsigc-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.10.7" rel="150400.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 2.6.2:
  + slot: Handle auto-disconnection when a slot contains a slot
    (bgo#755003).
  + slot and signal: Correct move constructors and move
    assignments (bgo#756484).
  + trackable, slot_base, signal_base, connection: Add some
    noexcept specs (bgo#756484).
  + trackable, slot, signal: Remove noexcept from move operations
    (bgo#756484).
  + slot and signal: Add missing move constructors and move
    assignments (bgo#756484).
  + signal_impl: =delete copy and move operations (bgo#756484).
  + typed_slot_rep: =delete unimplemented copy and move operations
    (bgo#756484).
  + slot_rep: =delete copy and move operations (bgo#756484).</changelog>
  <changelog author="dimstar@opensuse.org" date="1454587200">- Add libsigc++-std-c11.patch: Add -std=c11 to CFLAGS in the .pc
  file. This allows other packages building against libsigc++ to
  be aware of the C11 requirement we bring. libsigc++ itself checks
  for the availability during configure, so it is safe to pass this
  requirement on.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.7.1:
  + signal: Add a moving connect() method, taking an rvalue
    reference to a slot (bgo#756484).
  + can_deduce_result_type_with_decltype: Rename the check()
    methods to checksize(). check() is a preprocessor macro in Mac
    OS X (bgo#759315).
  + Temporarily undefine the nil macro, if it's defined. nil is a
    preprocessor macro in Objective-C++ and Mac OS X (bgo#695235).
  + Correct the mem_functor&lt;&gt; declarations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457784000">- Update to version 2.7.2:
  + Deprecate sigc::ref() and sigc::reference_wrapper(), adding
    support instead for std::ref(), std::cref(), and
    std::reference_wrapper().
  + mem_fun(): Deprecate mem_fun(pointer, func). Leaving just
    mem_fun(reference, func) (bgo#763215).
  + Make all operator bool() explicit. (A C++11 feature).
  + Build:
  - Remove some now-unnecessary configure checks (bgo#762065).
  - Update MSVC project.
  + Documentation: Improve the documentation of mem_fun(), making
    it clear that mem_fun() does not return a slot.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 2.8.0:
  + Documentation: Mention use with CMake.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078400">- No longer apply libsigc++-std-c11.patch for Tumbleweed, not
  needed anymore since GCC 6.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078401">- Update to version 2.9.2:
  + Minor documentation improvements.
  + Some more minor uses of C++11 syntax.
- Changes from version 2.9.1:
  + slot: Allow sigc::slot&lt;R(Args...)&gt; syntax, like std::function,
    deprecating the sigc::slot&lt;R, Args...&gt; syntax (bgo#763393).
  + signal: Allow sigc::signal&lt;R(Args...)&gt; syntax, like
    std::function, deprecating the sigc::signal&lt;R, Args...&gt; syntax
    (bgo#763393).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467806400">- Update to version 2.9.3:
  + signal:
  - Deprecate slots().
  - Deprecate emit_reverse().
  + Benchmark: Update it and use boost::timer, and actually build
    it, but not built by default.
  + Build: Fix the build on MSVC++ 2013 and 2015 (bgo#767777).</changelog>
  <changelog author="dimstar@opensuse.org" date="1474372800">- Update to version 2.10.0:
  + Fix silent builds (bgo#768797).</changelog>
  <changelog author="jengelh@inai.de" date="1480939200">- RPM group reassignment
- Drop --with-pic, we build no static libs for which it is meant</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543579200">- Update to version 2.10.1:
  + signal_impl::clear(): Don't clear the slot list during signal
    emission, to prevent a segfault. And add a test for this.
  + slot_base::set_parent(): Create a dummy slot_rep if necessary.
  + Avoid compiler warnings from function pointer conversions.
  + Build:
  - Make --disable-benchmark work.
  - Replace the Visual Studio project files with MSVC NMake
    project files.
  - Add MSVC_NMake/README.txt for Visual Studio builds.
  + Documentation:
  - signal_base: Warn against deletion during emission.
  - Update links in README, configure.ac, libsigcplusplus.doap.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565784000">- Update to version 2.10.2:
  + This release is identical to 2.10.1, except for: Reference docs
    generated by Doxygen 1.8.11. Hopefully it will show up at
    https://developer.gnome.org/libsigc++/stable/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567857600">- Drop conditional libsigc++-std-c11.patch: No longer needed for
  any currently supported version of openSUSE.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585137600">- Update to version 2.10.3:
  + Add Meson build, alongside the existing Autotools build.
  + Improve MSVC builds on Windows.
  + meson.build: Check if .git is a directory or file.
  + docs/reference/meson.build: Check if perl is found.
  + README: Describe building with Meson and Autotools.
  + Tests: Make test_track_obj.cc compile with clang++.</changelog>
  <changelog author="dimstar@opensuse.org" date="1601985600">- Update to version 2.10.4:
  + Build:
  - Meson build: Set default value of the 'warnings' option to
    'min'
  - NMake Makefiles: Several improvements
  - docs/reference/: Update for Doxygen &gt;= 1.8.16
  + Updated documentation.
- Switch to meson build system:
  + Add meson, and remove m4 BuildRequires.
  + Replace configure/make/make_install with
    meson/meson_build/meson_install macros.
  + No longer ship the htmldoc as part of the devel package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1606305600">- Update to version 2.10.6:
  + Build: Meson build: Fix versioning on macOS.
  + Documentation:
  - sigc++/sigc++.h: Describe how to use libsigc++ with Meson.
  - Update links to the web page, now at
    libsigcplusplus.github.io/libsigcplusplus.</changelog>
  <changelog author="dimstar@opensuse.org" date="1621598400">- Update to version 2.10.7:
  + Meson build:
  - Make it possible to use sigc++ as a subproject.
  - Fix dependency on files generated from .h.m4 files.
  - No implicit_include_directories.
  - Make quiet installations possible.
  - Fix build as subproject without building documentation.
  + Documentation fixes.</changelog>
  <changelog author="qzhao@suse.com" date="1681732800">- Add libsigc++2-remove-unnecessary-executable-flag-from-file.patch:
  cancel executable permission for file
  /usr/share/doc/packages/libsigc-2_0-0/NEWS(bsc#1209094,bsc#1209140).</changelog>
</package>
<package pkgid="829bc7da0f20b00409a8fe42db6e6d8c497ece6b9ff5c111d272c1f3c03ab541" name="libslirp" arch="src">
  <version epoch="0" ver="4.7.0+44" rel="150300.15.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 4.4.0:
  * Release v4.4.0
  * socket: consume empty packets
  * slirp: check pkt_len before reading protocol header
  * Remove the QEMU-special make build-system
  * Add DNS resolving for iOS
  * meson: support compiling as subproject
  * meson: remove meson-dist script
  * Add G_GNUC_PRINTF to local function slirp_vsnprintf
  * sosendoob: better document what urgc is used for
  * .gitlab-ci: add a Coverity stage
  * TCPIPHDR_DELTA: Fix potential negative value
  * udp, udp6, icmp, icmp6: Enable forwarding errors on Linux
  * icmp, icmp6: Add icmp_forward_error and icmp6_forward_error
  * udp, udp6, icmp: handle TTL value
  * ip_stripoptions use memmove
  * changelog: post-release
- fixes [bsc#1201551], remove patch:
  * 0001-meson-remove-meson-dist-script.patch</changelog>
  <changelog author="novell@tower-net.de" date="1626436800">- Update to version 4.6.0:
  * build-sys: forgot to bump version to 4.6.0
  * changelog: post-release
  * Release v4.6.0
  * udp: check upd_input buffer size
  * tftp: introduce a header structure
  * tftp: check tftp_input buffer size
  * upd6: check udp6_input buffer size
  * bootp: check bootp_input buffer size
  * bootp: limit vendor-specific area to input packet memory buffer
  * Revert "Set macOS deployment target to macOS 10.4"
- fixes CVE-2021-3592 [bsc#1187364], CVE-2021-3593 [bsc#1187365],
    CVE-2021-3594 [bsc#1187367],CVE-2021-3595[bsc#1187366]
  =&gt; Remove patches:
  * libslirp-CVE-2021-3592.patch
  * libslirp-CVE-2021-3593.patch
  * libslirp-CVE-2021-3594.patch
  * libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1626868800">- Update to version 4.6.1:
  * Release v4.6.1
  * Fix "DHCP broken in libslirp v4.6.0"
- fixes [bsc#1198773], remove patches:
  * libslirp-fix-dhcp-1.patch
  * libslirp-fix-dhcp-2.patch</changelog>
  <changelog author="fvogt@suse.com" date="1626955200">- Update to version 4.6.1+7:
  * Haiku: proper path to resolv.conf for DNS server
  * Fix for Haiku
  * dhcp: Always send DHCP_OPT_LEN bytes in options
- Commit _servicedata to fix changelogs
- Don't include .git in source archive, not needed
- Run set_version together with obs_scm</changelog>
  <changelog author="fvogt@suse.com" date="1658145600">- Update to version 4.7.0+44 (current git master):
  * Fix vmstate regression
  * msvc: use char* for pointer arithmetic
  * Align outgoing packets
  * Bump incoming packet alignment to 8 bytes
  * msvc: fix some gcc-specific pragma warnings
  * msvc: enable vmstate code on !gnuc
  * vmstate: only enable when building under GNU C
  * ncsitest: Fix build with msvc
  * Avoid running git-version-gen when building with MS VC
  * windows: export symbols
  * win32: replace strcasecmp with g_ascii_strcasecmp
  * Drop spurious inline
  * Avoid returning void
  * Fix arithmetic on void *
  * Avoid using ##__VA_ARGS__ gcc extension
  * Fix bitfields order for MSVC
  * Separate out SLIRP_PACKED to SLIRP_PACKED_BEGIN/END
  * Do not use ssize_t on Windows
  * Do not include unistd.h on windows, it does not have it
  * Accept build-aux/git-version-gen failing to run
  * container_of: avoid using __extension__
  * ncsi: Add Mellanox Get Mac Address handler
  * slirp: Add out-of-band ethernet address
  * ncsi: Add OEM command handler
  * ncsi: Add basic test for Get Version ID response
  * ncsi: Use response header for payload length
  * ncsi: Pass command header to response handlers
  * src/slirp.h: Bump the minimum Windows version to Windows 7
  * ncsi: Add Get Version ID command
  * ncsi: Pass Slirp structure to response handlers
  * slirp: Add manufacturer's ID
  * Add support for Haiku to meson.build
  * meson: add extra warnings
  * win32: declare some local functions as static
  * Include &lt;sys/socket.h&gt; and &lt;arpa/inet.h&gt; for AF_INET6 and inet_pton
  * Release v4.7.0
  * bump ABI version and age
  * slirp: invoke client callback before creating timers
  * pingtest: port to timer_new_opaque
  * introduce timer_new_opaque callback
  * introduce slirp_timer_new wrapper
  * icmp6: make ndp_send_ra static
  * Add sanitizers CI runs
  * socket: Handle ECONNABORTED from recv
  * bootp: fix g_str_has_prefix warning/critical
  * slirp: Don't duplicate packet in tcp_reass
  * Rename insque/remque -&gt; slirp_[ins|rem]que
  * mbuf: Use SLIRP_DEBUG to enable mbuf debugging instead of DEBUG
  * Replace inet_ntoa() with safer inet_ntop()
  * Add VMS_END marker
  * bootp: add support for UEFI HTTP boot
  * IPv6 DNS proxying support
  * Add missing scope_id in caching
  * Drop fixed TODO
  * socket: Move closesocket(so-&gt;s_aux) to sofree
  * socket: Check so_type instead of so_tcpcb for Unix-to-inet translation
  * socket: Add s_aux field to struct socket for storing auxilliary socket
  * socket: Initialize so_type in socreate
  * socket: Allocate Unix-to-TCP hostfwd port from OS by binding to port 0
  * Allow to disable internal DHCP server
  * slirp_pollfds_fill: Explain why dividing so_snd.sb_datalen by two
  * CI: run integration tests with slirp4netns
  * socket: Check address family for Unix-to-inet accept translation
  * socket: Add debug args for tcpx_listen (inet and Unix sockets)
  * socket: Restore original definition of fhost
  * socket: Move &lt;sys/un.h&gt; include to socket.h
  * Support Unix sockets in hostfwd
  * resolv: fix IPv6 resolution on Darwin
  * Use the exact sockaddr size in getnameinfo call
  * Initialize sin6_scope_id to zero
  * slirp_socketpair_with_oob: Connect pair through 127.0.0.1
  * resolv: fix memory leak when using libresolv
  * pingtest: Add a trivial ping test
  * icmp: Support falling back on trying a SOCK_RAW socket</changelog>
  <changelog author="pgajdos@suse.com" date="1668168000">- added patches
  fix https://gitlab.freedesktop.org/slirp/libslirp/-/issues/64
  + libslirp-semicolon.patch</changelog>
</package>
<package pkgid="1f15553c69868d50ca65f626c2f6d2f68b3b3b2f7a765f3b5265041554de8acc" name="libslirp0" arch="aarch64">
  <version epoch="0" ver="4.7.0+44" rel="150300.15.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 4.4.0:
  * Release v4.4.0
  * socket: consume empty packets
  * slirp: check pkt_len before reading protocol header
  * Remove the QEMU-special make build-system
  * Add DNS resolving for iOS
  * meson: support compiling as subproject
  * meson: remove meson-dist script
  * Add G_GNUC_PRINTF to local function slirp_vsnprintf
  * sosendoob: better document what urgc is used for
  * .gitlab-ci: add a Coverity stage
  * TCPIPHDR_DELTA: Fix potential negative value
  * udp, udp6, icmp, icmp6: Enable forwarding errors on Linux
  * icmp, icmp6: Add icmp_forward_error and icmp6_forward_error
  * udp, udp6, icmp: handle TTL value
  * ip_stripoptions use memmove
  * changelog: post-release
- fixes [bsc#1201551], remove patch:
  * 0001-meson-remove-meson-dist-script.patch</changelog>
  <changelog author="novell@tower-net.de" date="1626436800">- Update to version 4.6.0:
  * build-sys: forgot to bump version to 4.6.0
  * changelog: post-release
  * Release v4.6.0
  * udp: check upd_input buffer size
  * tftp: introduce a header structure
  * tftp: check tftp_input buffer size
  * upd6: check udp6_input buffer size
  * bootp: check bootp_input buffer size
  * bootp: limit vendor-specific area to input packet memory buffer
  * Revert "Set macOS deployment target to macOS 10.4"
- fixes CVE-2021-3592 [bsc#1187364], CVE-2021-3593 [bsc#1187365],
    CVE-2021-3594 [bsc#1187367],CVE-2021-3595[bsc#1187366]
  =&gt; Remove patches:
  * libslirp-CVE-2021-3592.patch
  * libslirp-CVE-2021-3593.patch
  * libslirp-CVE-2021-3594.patch
  * libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1626868800">- Update to version 4.6.1:
  * Release v4.6.1
  * Fix "DHCP broken in libslirp v4.6.0"
- fixes [bsc#1198773], remove patches:
  * libslirp-fix-dhcp-1.patch
  * libslirp-fix-dhcp-2.patch</changelog>
  <changelog author="fvogt@suse.com" date="1626955200">- Update to version 4.6.1+7:
  * Haiku: proper path to resolv.conf for DNS server
  * Fix for Haiku
  * dhcp: Always send DHCP_OPT_LEN bytes in options
- Commit _servicedata to fix changelogs
- Don't include .git in source archive, not needed
- Run set_version together with obs_scm</changelog>
  <changelog author="fvogt@suse.com" date="1658145600">- Update to version 4.7.0+44 (current git master):
  * Fix vmstate regression
  * msvc: use char* for pointer arithmetic
  * Align outgoing packets
  * Bump incoming packet alignment to 8 bytes
  * msvc: fix some gcc-specific pragma warnings
  * msvc: enable vmstate code on !gnuc
  * vmstate: only enable when building under GNU C
  * ncsitest: Fix build with msvc
  * Avoid running git-version-gen when building with MS VC
  * windows: export symbols
  * win32: replace strcasecmp with g_ascii_strcasecmp
  * Drop spurious inline
  * Avoid returning void
  * Fix arithmetic on void *
  * Avoid using ##__VA_ARGS__ gcc extension
  * Fix bitfields order for MSVC
  * Separate out SLIRP_PACKED to SLIRP_PACKED_BEGIN/END
  * Do not use ssize_t on Windows
  * Do not include unistd.h on windows, it does not have it
  * Accept build-aux/git-version-gen failing to run
  * container_of: avoid using __extension__
  * ncsi: Add Mellanox Get Mac Address handler
  * slirp: Add out-of-band ethernet address
  * ncsi: Add OEM command handler
  * ncsi: Add basic test for Get Version ID response
  * ncsi: Use response header for payload length
  * ncsi: Pass command header to response handlers
  * src/slirp.h: Bump the minimum Windows version to Windows 7
  * ncsi: Add Get Version ID command
  * ncsi: Pass Slirp structure to response handlers
  * slirp: Add manufacturer's ID
  * Add support for Haiku to meson.build
  * meson: add extra warnings
  * win32: declare some local functions as static
  * Include &lt;sys/socket.h&gt; and &lt;arpa/inet.h&gt; for AF_INET6 and inet_pton
  * Release v4.7.0
  * bump ABI version and age
  * slirp: invoke client callback before creating timers
  * pingtest: port to timer_new_opaque
  * introduce timer_new_opaque callback
  * introduce slirp_timer_new wrapper
  * icmp6: make ndp_send_ra static
  * Add sanitizers CI runs
  * socket: Handle ECONNABORTED from recv
  * bootp: fix g_str_has_prefix warning/critical
  * slirp: Don't duplicate packet in tcp_reass
  * Rename insque/remque -&gt; slirp_[ins|rem]que
  * mbuf: Use SLIRP_DEBUG to enable mbuf debugging instead of DEBUG
  * Replace inet_ntoa() with safer inet_ntop()
  * Add VMS_END marker
  * bootp: add support for UEFI HTTP boot
  * IPv6 DNS proxying support
  * Add missing scope_id in caching
  * Drop fixed TODO
  * socket: Move closesocket(so-&gt;s_aux) to sofree
  * socket: Check so_type instead of so_tcpcb for Unix-to-inet translation
  * socket: Add s_aux field to struct socket for storing auxilliary socket
  * socket: Initialize so_type in socreate
  * socket: Allocate Unix-to-TCP hostfwd port from OS by binding to port 0
  * Allow to disable internal DHCP server
  * slirp_pollfds_fill: Explain why dividing so_snd.sb_datalen by two
  * CI: run integration tests with slirp4netns
  * socket: Check address family for Unix-to-inet accept translation
  * socket: Add debug args for tcpx_listen (inet and Unix sockets)
  * socket: Restore original definition of fhost
  * socket: Move &lt;sys/un.h&gt; include to socket.h
  * Support Unix sockets in hostfwd
  * resolv: fix IPv6 resolution on Darwin
  * Use the exact sockaddr size in getnameinfo call
  * Initialize sin6_scope_id to zero
  * slirp_socketpair_with_oob: Connect pair through 127.0.0.1
  * resolv: fix memory leak when using libresolv
  * pingtest: Add a trivial ping test
  * icmp: Support falling back on trying a SOCK_RAW socket</changelog>
  <changelog author="pgajdos@suse.com" date="1668168000">- added patches
  fix https://gitlab.freedesktop.org/slirp/libslirp/-/issues/64
  + libslirp-semicolon.patch</changelog>
</package>
<package pkgid="c83de2bdeb8cdb17bb0fe8c9055a43f25bdd747fb855246d7bc8d862cf1354e4" name="libslirp0" arch="s390x">
  <version epoch="0" ver="4.7.0+44" rel="150300.15.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 4.4.0:
  * Release v4.4.0
  * socket: consume empty packets
  * slirp: check pkt_len before reading protocol header
  * Remove the QEMU-special make build-system
  * Add DNS resolving for iOS
  * meson: support compiling as subproject
  * meson: remove meson-dist script
  * Add G_GNUC_PRINTF to local function slirp_vsnprintf
  * sosendoob: better document what urgc is used for
  * .gitlab-ci: add a Coverity stage
  * TCPIPHDR_DELTA: Fix potential negative value
  * udp, udp6, icmp, icmp6: Enable forwarding errors on Linux
  * icmp, icmp6: Add icmp_forward_error and icmp6_forward_error
  * udp, udp6, icmp: handle TTL value
  * ip_stripoptions use memmove
  * changelog: post-release
- fixes [bsc#1201551], remove patch:
  * 0001-meson-remove-meson-dist-script.patch</changelog>
  <changelog author="novell@tower-net.de" date="1626436800">- Update to version 4.6.0:
  * build-sys: forgot to bump version to 4.6.0
  * changelog: post-release
  * Release v4.6.0
  * udp: check upd_input buffer size
  * tftp: introduce a header structure
  * tftp: check tftp_input buffer size
  * upd6: check udp6_input buffer size
  * bootp: check bootp_input buffer size
  * bootp: limit vendor-specific area to input packet memory buffer
  * Revert "Set macOS deployment target to macOS 10.4"
- fixes CVE-2021-3592 [bsc#1187364], CVE-2021-3593 [bsc#1187365],
    CVE-2021-3594 [bsc#1187367],CVE-2021-3595[bsc#1187366]
  =&gt; Remove patches:
  * libslirp-CVE-2021-3592.patch
  * libslirp-CVE-2021-3593.patch
  * libslirp-CVE-2021-3594.patch
  * libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1626868800">- Update to version 4.6.1:
  * Release v4.6.1
  * Fix "DHCP broken in libslirp v4.6.0"
- fixes [bsc#1198773], remove patches:
  * libslirp-fix-dhcp-1.patch
  * libslirp-fix-dhcp-2.patch</changelog>
  <changelog author="fvogt@suse.com" date="1626955200">- Update to version 4.6.1+7:
  * Haiku: proper path to resolv.conf for DNS server
  * Fix for Haiku
  * dhcp: Always send DHCP_OPT_LEN bytes in options
- Commit _servicedata to fix changelogs
- Don't include .git in source archive, not needed
- Run set_version together with obs_scm</changelog>
  <changelog author="fvogt@suse.com" date="1658145600">- Update to version 4.7.0+44 (current git master):
  * Fix vmstate regression
  * msvc: use char* for pointer arithmetic
  * Align outgoing packets
  * Bump incoming packet alignment to 8 bytes
  * msvc: fix some gcc-specific pragma warnings
  * msvc: enable vmstate code on !gnuc
  * vmstate: only enable when building under GNU C
  * ncsitest: Fix build with msvc
  * Avoid running git-version-gen when building with MS VC
  * windows: export symbols
  * win32: replace strcasecmp with g_ascii_strcasecmp
  * Drop spurious inline
  * Avoid returning void
  * Fix arithmetic on void *
  * Avoid using ##__VA_ARGS__ gcc extension
  * Fix bitfields order for MSVC
  * Separate out SLIRP_PACKED to SLIRP_PACKED_BEGIN/END
  * Do not use ssize_t on Windows
  * Do not include unistd.h on windows, it does not have it
  * Accept build-aux/git-version-gen failing to run
  * container_of: avoid using __extension__
  * ncsi: Add Mellanox Get Mac Address handler
  * slirp: Add out-of-band ethernet address
  * ncsi: Add OEM command handler
  * ncsi: Add basic test for Get Version ID response
  * ncsi: Use response header for payload length
  * ncsi: Pass command header to response handlers
  * src/slirp.h: Bump the minimum Windows version to Windows 7
  * ncsi: Add Get Version ID command
  * ncsi: Pass Slirp structure to response handlers
  * slirp: Add manufacturer's ID
  * Add support for Haiku to meson.build
  * meson: add extra warnings
  * win32: declare some local functions as static
  * Include &lt;sys/socket.h&gt; and &lt;arpa/inet.h&gt; for AF_INET6 and inet_pton
  * Release v4.7.0
  * bump ABI version and age
  * slirp: invoke client callback before creating timers
  * pingtest: port to timer_new_opaque
  * introduce timer_new_opaque callback
  * introduce slirp_timer_new wrapper
  * icmp6: make ndp_send_ra static
  * Add sanitizers CI runs
  * socket: Handle ECONNABORTED from recv
  * bootp: fix g_str_has_prefix warning/critical
  * slirp: Don't duplicate packet in tcp_reass
  * Rename insque/remque -&gt; slirp_[ins|rem]que
  * mbuf: Use SLIRP_DEBUG to enable mbuf debugging instead of DEBUG
  * Replace inet_ntoa() with safer inet_ntop()
  * Add VMS_END marker
  * bootp: add support for UEFI HTTP boot
  * IPv6 DNS proxying support
  * Add missing scope_id in caching
  * Drop fixed TODO
  * socket: Move closesocket(so-&gt;s_aux) to sofree
  * socket: Check so_type instead of so_tcpcb for Unix-to-inet translation
  * socket: Add s_aux field to struct socket for storing auxilliary socket
  * socket: Initialize so_type in socreate
  * socket: Allocate Unix-to-TCP hostfwd port from OS by binding to port 0
  * Allow to disable internal DHCP server
  * slirp_pollfds_fill: Explain why dividing so_snd.sb_datalen by two
  * CI: run integration tests with slirp4netns
  * socket: Check address family for Unix-to-inet accept translation
  * socket: Add debug args for tcpx_listen (inet and Unix sockets)
  * socket: Restore original definition of fhost
  * socket: Move &lt;sys/un.h&gt; include to socket.h
  * Support Unix sockets in hostfwd
  * resolv: fix IPv6 resolution on Darwin
  * Use the exact sockaddr size in getnameinfo call
  * Initialize sin6_scope_id to zero
  * slirp_socketpair_with_oob: Connect pair through 127.0.0.1
  * resolv: fix memory leak when using libresolv
  * pingtest: Add a trivial ping test
  * icmp: Support falling back on trying a SOCK_RAW socket</changelog>
  <changelog author="pgajdos@suse.com" date="1668168000">- added patches
  fix https://gitlab.freedesktop.org/slirp/libslirp/-/issues/64
  + libslirp-semicolon.patch</changelog>
</package>
<package pkgid="abdb538c110b5de40dcf3439dd7e1a2fff1d241416394cb8fbc26edaa3b9609b" name="libslirp0" arch="x86_64">
  <version epoch="0" ver="4.7.0+44" rel="150300.15.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 4.4.0:
  * Release v4.4.0
  * socket: consume empty packets
  * slirp: check pkt_len before reading protocol header
  * Remove the QEMU-special make build-system
  * Add DNS resolving for iOS
  * meson: support compiling as subproject
  * meson: remove meson-dist script
  * Add G_GNUC_PRINTF to local function slirp_vsnprintf
  * sosendoob: better document what urgc is used for
  * .gitlab-ci: add a Coverity stage
  * TCPIPHDR_DELTA: Fix potential negative value
  * udp, udp6, icmp, icmp6: Enable forwarding errors on Linux
  * icmp, icmp6: Add icmp_forward_error and icmp6_forward_error
  * udp, udp6, icmp: handle TTL value
  * ip_stripoptions use memmove
  * changelog: post-release
- fixes [bsc#1201551], remove patch:
  * 0001-meson-remove-meson-dist-script.patch</changelog>
  <changelog author="novell@tower-net.de" date="1626436800">- Update to version 4.6.0:
  * build-sys: forgot to bump version to 4.6.0
  * changelog: post-release
  * Release v4.6.0
  * udp: check upd_input buffer size
  * tftp: introduce a header structure
  * tftp: check tftp_input buffer size
  * upd6: check udp6_input buffer size
  * bootp: check bootp_input buffer size
  * bootp: limit vendor-specific area to input packet memory buffer
  * Revert "Set macOS deployment target to macOS 10.4"
- fixes CVE-2021-3592 [bsc#1187364], CVE-2021-3593 [bsc#1187365],
    CVE-2021-3594 [bsc#1187367],CVE-2021-3595[bsc#1187366]
  =&gt; Remove patches:
  * libslirp-CVE-2021-3592.patch
  * libslirp-CVE-2021-3593.patch
  * libslirp-CVE-2021-3594.patch
  * libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1626868800">- Update to version 4.6.1:
  * Release v4.6.1
  * Fix "DHCP broken in libslirp v4.6.0"
- fixes [bsc#1198773], remove patches:
  * libslirp-fix-dhcp-1.patch
  * libslirp-fix-dhcp-2.patch</changelog>
  <changelog author="fvogt@suse.com" date="1626955200">- Update to version 4.6.1+7:
  * Haiku: proper path to resolv.conf for DNS server
  * Fix for Haiku
  * dhcp: Always send DHCP_OPT_LEN bytes in options
- Commit _servicedata to fix changelogs
- Don't include .git in source archive, not needed
- Run set_version together with obs_scm</changelog>
  <changelog author="fvogt@suse.com" date="1658145600">- Update to version 4.7.0+44 (current git master):
  * Fix vmstate regression
  * msvc: use char* for pointer arithmetic
  * Align outgoing packets
  * Bump incoming packet alignment to 8 bytes
  * msvc: fix some gcc-specific pragma warnings
  * msvc: enable vmstate code on !gnuc
  * vmstate: only enable when building under GNU C
  * ncsitest: Fix build with msvc
  * Avoid running git-version-gen when building with MS VC
  * windows: export symbols
  * win32: replace strcasecmp with g_ascii_strcasecmp
  * Drop spurious inline
  * Avoid returning void
  * Fix arithmetic on void *
  * Avoid using ##__VA_ARGS__ gcc extension
  * Fix bitfields order for MSVC
  * Separate out SLIRP_PACKED to SLIRP_PACKED_BEGIN/END
  * Do not use ssize_t on Windows
  * Do not include unistd.h on windows, it does not have it
  * Accept build-aux/git-version-gen failing to run
  * container_of: avoid using __extension__
  * ncsi: Add Mellanox Get Mac Address handler
  * slirp: Add out-of-band ethernet address
  * ncsi: Add OEM command handler
  * ncsi: Add basic test for Get Version ID response
  * ncsi: Use response header for payload length
  * ncsi: Pass command header to response handlers
  * src/slirp.h: Bump the minimum Windows version to Windows 7
  * ncsi: Add Get Version ID command
  * ncsi: Pass Slirp structure to response handlers
  * slirp: Add manufacturer's ID
  * Add support for Haiku to meson.build
  * meson: add extra warnings
  * win32: declare some local functions as static
  * Include &lt;sys/socket.h&gt; and &lt;arpa/inet.h&gt; for AF_INET6 and inet_pton
  * Release v4.7.0
  * bump ABI version and age
  * slirp: invoke client callback before creating timers
  * pingtest: port to timer_new_opaque
  * introduce timer_new_opaque callback
  * introduce slirp_timer_new wrapper
  * icmp6: make ndp_send_ra static
  * Add sanitizers CI runs
  * socket: Handle ECONNABORTED from recv
  * bootp: fix g_str_has_prefix warning/critical
  * slirp: Don't duplicate packet in tcp_reass
  * Rename insque/remque -&gt; slirp_[ins|rem]que
  * mbuf: Use SLIRP_DEBUG to enable mbuf debugging instead of DEBUG
  * Replace inet_ntoa() with safer inet_ntop()
  * Add VMS_END marker
  * bootp: add support for UEFI HTTP boot
  * IPv6 DNS proxying support
  * Add missing scope_id in caching
  * Drop fixed TODO
  * socket: Move closesocket(so-&gt;s_aux) to sofree
  * socket: Check so_type instead of so_tcpcb for Unix-to-inet translation
  * socket: Add s_aux field to struct socket for storing auxilliary socket
  * socket: Initialize so_type in socreate
  * socket: Allocate Unix-to-TCP hostfwd port from OS by binding to port 0
  * Allow to disable internal DHCP server
  * slirp_pollfds_fill: Explain why dividing so_snd.sb_datalen by two
  * CI: run integration tests with slirp4netns
  * socket: Check address family for Unix-to-inet accept translation
  * socket: Add debug args for tcpx_listen (inet and Unix sockets)
  * socket: Restore original definition of fhost
  * socket: Move &lt;sys/un.h&gt; include to socket.h
  * Support Unix sockets in hostfwd
  * resolv: fix IPv6 resolution on Darwin
  * Use the exact sockaddr size in getnameinfo call
  * Initialize sin6_scope_id to zero
  * slirp_socketpair_with_oob: Connect pair through 127.0.0.1
  * resolv: fix memory leak when using libresolv
  * pingtest: Add a trivial ping test
  * icmp: Support falling back on trying a SOCK_RAW socket</changelog>
  <changelog author="pgajdos@suse.com" date="1668168000">- added patches
  fix https://gitlab.freedesktop.org/slirp/libslirp/-/issues/64
  + libslirp-semicolon.patch</changelog>
</package>
<package pkgid="55474987f2de509237bb5f42c9d91d7acff95fef1d0f98f27805fb61979381b5" name="libsmartcols1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="ac91e4348b5fb8df8ea21aaccba927422fd27e995b3db5385d9800cd6bf4abe4" name="libsmartcols1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="bde0c7efd42d2dfb74262bbb8cf39df6d64f142cb9fd48da638555bf936f13b1" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="0e971d190e3bf9dbbc32e4cc14f3c688d785ea3bf9c0925cd7263ed818825726" name="libsnapper5" arch="aarch64">
  <version epoch="0" ver="0.8.16" rel="150300.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1586174400">- updated translations (bsc#1149754)
- generate dsc file for Ubuntu 19.10</changelog>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
</package>
<package pkgid="56ad9e35d7f598ecaf35544f3dc89996bb9222968c2ddc78a78d20619b72827b" name="libsnapper5" arch="s390x">
  <version epoch="0" ver="0.8.16" rel="150300.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1586174400">- updated translations (bsc#1149754)
- generate dsc file for Ubuntu 19.10</changelog>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
</package>
<package pkgid="0c3ec156fdc6225dc4d3c11a6d4811301be5582559beb24f243ac400784cd076" name="libsnapper5" arch="x86_64">
  <version epoch="0" ver="0.8.16" rel="150300.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1586174400">- updated translations (bsc#1149754)
- generate dsc file for Ubuntu 19.10</changelog>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
</package>
<package pkgid="2d2aa2867710b163cc30d88bcf6ab8100084ec76553f52f8a97225db1c4dfb9b" name="libsnapper5" arch="aarch64">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="f70601d0c885004b9dfc35ea748cb8c2103e3b8798adfc3be1d511d080adecc1" name="libsnapper5" arch="s390x">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="b8a8130e70ae5caa1ac186af6e6760de05437221799cc23820196ee29dc1a1f1" name="libsnapper5" arch="x86_64">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="41af0ae32652faeaed55377cad3397a6b6d6462db4f9f0bb006a9bfe788c9f08" name="libsoftokn3" arch="aarch64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="8569cc9b811a52b8994824f42f7cde4dcec057adbd93398695653ee269f47d1a" name="libsoftokn3" arch="s390x">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="0fb587f369b1f35299b3fdb60ab99de0661d35e0df8613229dd1ba029d732337" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="5c9509e2eaec79fa9db1272a4acae15c98293a4a49774638ba0eabe565e35bd7" name="libsoftokn3" arch="aarch64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="b167dfd410bb37beb9fee374e4fdf54084a1ed9724529cebd56473c8bb896882" name="libsoftokn3" arch="s390x">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="d7d8f46ca0c01c68bcf9ec5c6d14e136278b0c63488e9a1e41115b10e06bb73e" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="22e75b29c21842d7092fdc7107ea1535dda91ef937df7c798e851bbf0c4f8e6b" name="libsoftokn3-hmac" arch="aarch64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="710356d65a854de5397cbf969f97292a79651d865d6b6001c50262bc9344bb83" name="libsoftokn3-hmac" arch="s390x">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="528d53fa3b6dacbb45a3b3073432deb25ed994ffef417e2ea000be2ad5cb6486" name="libsoftokn3-hmac" arch="x86_64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="f412f7242f97835b4542b01cea6df1b4af2adaa213e53cdb0687359f19d191b9" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="a801bfc81e357c770141cc06b58d8221a66a86eea75725f44bed5f9cb96fa3db" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="d2e7e89c6e6cb80b789eda59041bebef3b00a8f22463d8e4bfc0329a2608a028" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="8802942eba908792ff54d4d280c75060c0f7b0e4aab2022a6edeead43e135ca0" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="f85c7e284958c305634a6f5cae0c354def2fcd4c34ae0c5e0d24e9cbe7ee8a3e" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="2e960c5180c452e93fa8750f783f68bccbcc78ac4047a325cf1a2d0b04efa87e" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="51d22ccd6f5c3ac9bfa5e4ad4c12b34f37617bbc9a707494fec2187e4cd8fdc0" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="10b19f5c0818eca003b01c9d33294184c00ded8caa50b7163ceebd32cc7ab175" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="5b1ea8b0f9c800cc556ffa98b89d89f7a9949abc56098e88d17b7f3467da2bbc" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8822083bdcf1810d65c65a45f5296e9d070fde90183acdcf0a98407e8f2d61ef" name="libstdc++6" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="01ec7dfd8e0a34fb09dde713a9f458a6fe998729b9188777b19bb9b4791099f1" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="dd7870531229aff557506426d3a271a7141cb0c07c775dce16d35643b3c5160a" name="libsystemd0" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="560b5bae3243799d99eaf77b26e630a4d2010388dc3850a5881923dc2412ac90" name="libsystemd0" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="0b3554664d871a09c45674da9513c468be4744f719216fd3b788d1642be66821" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="ca2b7a2b635686e70f9b3f3fe61c762c3fbbdce21c8985da9c094b264df48a94" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="320e030ae83cd2f5fad7d6a9e5a09d061b83e630b093e420f3125d81a3756a58" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="228558555f1ace0f24049bfdf1425b17d7128a576ff4a9c4848fc2c6045a605b" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="0afc57f2123b18ccfa13f7ebeab43c55d8e4f6fa5892ab555984fff513a27088" name="libtpms" arch="src">
  <version epoch="0" ver="0.8.2" rel="150300.3.9.1"/>
  <changelog author="meissner@suse.com" date="1389700800">- import 0.5.1
  - software TPM driver library for hooking into QEMU</changelog>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 0.5.2
  * No entry for this release
- Update project home and download Urls
- Add autoconf, automake and libtool build require; the tarball
  comes from git and configure script has to be generated</changelog>
  <changelog author="vcizek@suse.com" date="1516190400">- Update to version 0.6.0-dev1
  * no upstream changelog
  * fix build with openssl 1.1 (bsc#1074801)
- fix rpm group</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Update to version 0.6.0
  * Introduce TPM2 support
- Use %license tag for LICENSE</changelog>
  <changelog author="glin@suse.com" date="1567684800">- Update to version 0.7.0
  * fixes for TPM2
- Add gcc-c++ to BuildRequires</changelog>
  <changelog author="kai.liu@suse.com" date="1595505600">- Update to version 0.7.3
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest `swtpm` (master, stable branches) for test cases to
    succeed there.
- Changes since version 0.7.2
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rathern than
    max. possible
  * Fixes to symmetric decrytion related to input size check, defer
    padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)] and to
    always use a temporary malloc'ed buffer for decryption
- Changes since version 0.7.1
  * tpm2: Fix TDES key creation by adding missing un-/marshalling
    functions
  * tpm2: Fix a bug in CheckAuthSession
  * compilation fixes for TPM 1.2 &amp; TPM 2 and various architectures
    and gcc versions
  * Fix support for NIST curves P{192,224,521} and SM2 P256 and
    BNP648 that would not work;
  * Runtime filter elliptic curves (that OpenSSL does not support)
    and do not advertise those curves as capabilities
  * Removed unnecessary space in MANUFACTURER "IBM " -&gt; "IBM"</changelog>
  <changelog author="glin@suse.com" date="1606132800">- Update to version 0.7.4
  * Addressed potential constant-time related issues in TPM 1.2 and
    TPM 2 code
    TPM 1.2: RSA decryption
    TPM 2: EcSchnorr and EcSM2 signatures; Ecsda is handled by OpenSSL
  * Fixed some compilation issues</changelog>
  <changelog author="glin@suse.com" date="1616155200">- Update to version 0.7.7
  * CryptSym: fix AES output IV (bsc#1183729, CVE-2021-3446)
  * tpm2: Fix public key context save due to ANY_OBJECT_Marshal usage
  * tpm2: Address some Coverity issues (false positives)
  * tpm1.2: Backported ASAN/UBSAN related fixes
  * tpm2: Return properly sized array for b parameter for NIST P521
    (HLK)
  * tpm2: Addressed issues detected by UBSAN
  * tpm2: Addressed issues detected by cppcheck (false positives)</changelog>
  <changelog author="glin@suse.com" date="1618833600">- Update to version 0.8.2
  * NOTE: Downgrade to 0.7.x or below is not possible.
    Due to fixes in the TPM 2 prime number generation code in
    rev155 it is not possible to downgrade from libtpms version
    0.8.0 to some previous version. The seeds are now associated
    with an age so that older seeds use the old TPM 2 prime number
    generation code while newer seed use the newer code.
  * tpm2: rev155: Add new RsaAdjustPrimeCandidate code but do
    not use (bsc#1184939 CVE-2021-3505)
  * tpm2: Activate SEED_COMPAT_LEVEL_RSA_PRIME_ADJUST_FIX
    (bsc#1184939 CVE-2021-3505)
  * Update to TPM 2 code release 159
  - X509 support is enabled
    + SM2 signing of ceritificates is NOT supported
  - Authenticated timers are disabled
  * Update to TPM 2 code relase 162
  - ECC encryption / decryption is disabled
  * Fix support for elliptic curve due to missing unmarshalling
    code
  * Runtime filter supported elliptic curves supported by OpenSSL
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rather than
    max
  * Fixes to symmetric decryption related to input size check,
    defer padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)]
    and to always use a temporary malloc'ed buffer for decryption
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest swtpm for test cases to succeed there.</changelog>
  <changelog author="pgajdos@suse.com" date="1630411200">- security update
- added patches
  fix CVE-2021-3746 [bsc#1189935], out-of-bounds access via specially crafted TPM 2 command packets
  + libtpms-CVE-2021-3746.patch</changelog>
  <changelog author="meissner@suse.com" date="1666353600">- Added patches:
  0001-tpm2-Reset-TPM2B-buffer-sizes-after-test-fails-for-v.patch
  0002-tpm2-Add-maxSize-parameter-to-TPM2B_Marshal-for-sani.patch
  0003-tpm2-Restore-original-value-if-unmarsalled-value-was.patch
- CVE-2021-3623: Fixed out-of-bounds access when trying to resume the
  state of the vTPM (bsc#1187767)</changelog>
  <changelog author="pgajdos@suse.com" date="1669377600">- fix build for ppc64le: use -Wl,--no-as-needed in check-local
  [bsc#1204556]</changelog>
  <changelog author="meissner@suse.com" date="1682424000">- 0001-tpm2-Check-size-of-buffer-before-accessing-it-CVE-20.patch:
  Fixes CVE-2023-1017 &amp; CVE-2023-1018: fixed memory corruptions in CryptParameterDecryption (bsc#1206022 bsc#1206023)</changelog>
</package>
<package pkgid="f2ff0f7526d9e142e1c4bef612b992575298620b2b44fa771326dace98e3534e" name="libtpms0" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="150300.3.9.1"/>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 0.5.2
  * No entry for this release
- Update project home and download Urls
- Add autoconf, automake and libtool build require; the tarball
  comes from git and configure script has to be generated</changelog>
  <changelog author="vcizek@suse.com" date="1516190400">- Update to version 0.6.0-dev1
  * no upstream changelog
  * fix build with openssl 1.1 (bsc#1074801)
- fix rpm group</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Update to version 0.6.0
  * Introduce TPM2 support
- Use %license tag for LICENSE</changelog>
  <changelog author="glin@suse.com" date="1567684800">- Update to version 0.7.0
  * fixes for TPM2
- Add gcc-c++ to BuildRequires</changelog>
  <changelog author="kai.liu@suse.com" date="1595505600">- Update to version 0.7.3
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest `swtpm` (master, stable branches) for test cases to
    succeed there.
- Changes since version 0.7.2
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rathern than
    max. possible
  * Fixes to symmetric decrytion related to input size check, defer
    padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)] and to
    always use a temporary malloc'ed buffer for decryption
- Changes since version 0.7.1
  * tpm2: Fix TDES key creation by adding missing un-/marshalling
    functions
  * tpm2: Fix a bug in CheckAuthSession
  * compilation fixes for TPM 1.2 &amp; TPM 2 and various architectures
    and gcc versions
  * Fix support for NIST curves P{192,224,521} and SM2 P256 and
    BNP648 that would not work;
  * Runtime filter elliptic curves (that OpenSSL does not support)
    and do not advertise those curves as capabilities
  * Removed unnecessary space in MANUFACTURER "IBM " -&gt; "IBM"</changelog>
  <changelog author="glin@suse.com" date="1606132800">- Update to version 0.7.4
  * Addressed potential constant-time related issues in TPM 1.2 and
    TPM 2 code
    TPM 1.2: RSA decryption
    TPM 2: EcSchnorr and EcSM2 signatures; Ecsda is handled by OpenSSL
  * Fixed some compilation issues</changelog>
  <changelog author="glin@suse.com" date="1616155200">- Update to version 0.7.7
  * CryptSym: fix AES output IV (bsc#1183729, CVE-2021-3446)
  * tpm2: Fix public key context save due to ANY_OBJECT_Marshal usage
  * tpm2: Address some Coverity issues (false positives)
  * tpm1.2: Backported ASAN/UBSAN related fixes
  * tpm2: Return properly sized array for b parameter for NIST P521
    (HLK)
  * tpm2: Addressed issues detected by UBSAN
  * tpm2: Addressed issues detected by cppcheck (false positives)</changelog>
  <changelog author="glin@suse.com" date="1618833600">- Update to version 0.8.2
  * NOTE: Downgrade to 0.7.x or below is not possible.
    Due to fixes in the TPM 2 prime number generation code in
    rev155 it is not possible to downgrade from libtpms version
    0.8.0 to some previous version. The seeds are now associated
    with an age so that older seeds use the old TPM 2 prime number
    generation code while newer seed use the newer code.
  * tpm2: rev155: Add new RsaAdjustPrimeCandidate code but do
    not use (bsc#1184939 CVE-2021-3505)
  * tpm2: Activate SEED_COMPAT_LEVEL_RSA_PRIME_ADJUST_FIX
    (bsc#1184939 CVE-2021-3505)
  * Update to TPM 2 code release 159
  - X509 support is enabled
    + SM2 signing of ceritificates is NOT supported
  - Authenticated timers are disabled
  * Update to TPM 2 code relase 162
  - ECC encryption / decryption is disabled
  * Fix support for elliptic curve due to missing unmarshalling
    code
  * Runtime filter supported elliptic curves supported by OpenSSL
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rather than
    max
  * Fixes to symmetric decryption related to input size check,
    defer padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)]
    and to always use a temporary malloc'ed buffer for decryption
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest swtpm for test cases to succeed there.</changelog>
  <changelog author="pgajdos@suse.com" date="1630411200">- security update
- added patches
  fix CVE-2021-3746 [bsc#1189935], out-of-bounds access via specially crafted TPM 2 command packets
  + libtpms-CVE-2021-3746.patch</changelog>
  <changelog author="meissner@suse.com" date="1666353600">- Added patches:
  0001-tpm2-Reset-TPM2B-buffer-sizes-after-test-fails-for-v.patch
  0002-tpm2-Add-maxSize-parameter-to-TPM2B_Marshal-for-sani.patch
  0003-tpm2-Restore-original-value-if-unmarsalled-value-was.patch
- CVE-2021-3623: Fixed out-of-bounds access when trying to resume the
  state of the vTPM (bsc#1187767)</changelog>
  <changelog author="pgajdos@suse.com" date="1669377600">- fix build for ppc64le: use -Wl,--no-as-needed in check-local
  [bsc#1204556]</changelog>
  <changelog author="meissner@suse.com" date="1682424000">- 0001-tpm2-Check-size-of-buffer-before-accessing-it-CVE-20.patch:
  Fixes CVE-2023-1017 &amp; CVE-2023-1018: fixed memory corruptions in CryptParameterDecryption (bsc#1206022 bsc#1206023)</changelog>
</package>
<package pkgid="0e29ee86b065b032b40c653f8bcfa0d52201aaa48ec4f21130b958c167a0aef7" name="libtpms0" arch="s390x">
  <version epoch="0" ver="0.8.2" rel="150300.3.9.1"/>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 0.5.2
  * No entry for this release
- Update project home and download Urls
- Add autoconf, automake and libtool build require; the tarball
  comes from git and configure script has to be generated</changelog>
  <changelog author="vcizek@suse.com" date="1516190400">- Update to version 0.6.0-dev1
  * no upstream changelog
  * fix build with openssl 1.1 (bsc#1074801)
- fix rpm group</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Update to version 0.6.0
  * Introduce TPM2 support
- Use %license tag for LICENSE</changelog>
  <changelog author="glin@suse.com" date="1567684800">- Update to version 0.7.0
  * fixes for TPM2
- Add gcc-c++ to BuildRequires</changelog>
  <changelog author="kai.liu@suse.com" date="1595505600">- Update to version 0.7.3
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest `swtpm` (master, stable branches) for test cases to
    succeed there.
- Changes since version 0.7.2
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rathern than
    max. possible
  * Fixes to symmetric decrytion related to input size check, defer
    padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)] and to
    always use a temporary malloc'ed buffer for decryption
- Changes since version 0.7.1
  * tpm2: Fix TDES key creation by adding missing un-/marshalling
    functions
  * tpm2: Fix a bug in CheckAuthSession
  * compilation fixes for TPM 1.2 &amp; TPM 2 and various architectures
    and gcc versions
  * Fix support for NIST curves P{192,224,521} and SM2 P256 and
    BNP648 that would not work;
  * Runtime filter elliptic curves (that OpenSSL does not support)
    and do not advertise those curves as capabilities
  * Removed unnecessary space in MANUFACTURER "IBM " -&gt; "IBM"</changelog>
  <changelog author="glin@suse.com" date="1606132800">- Update to version 0.7.4
  * Addressed potential constant-time related issues in TPM 1.2 and
    TPM 2 code
    TPM 1.2: RSA decryption
    TPM 2: EcSchnorr and EcSM2 signatures; Ecsda is handled by OpenSSL
  * Fixed some compilation issues</changelog>
  <changelog author="glin@suse.com" date="1616155200">- Update to version 0.7.7
  * CryptSym: fix AES output IV (bsc#1183729, CVE-2021-3446)
  * tpm2: Fix public key context save due to ANY_OBJECT_Marshal usage
  * tpm2: Address some Coverity issues (false positives)
  * tpm1.2: Backported ASAN/UBSAN related fixes
  * tpm2: Return properly sized array for b parameter for NIST P521
    (HLK)
  * tpm2: Addressed issues detected by UBSAN
  * tpm2: Addressed issues detected by cppcheck (false positives)</changelog>
  <changelog author="glin@suse.com" date="1618833600">- Update to version 0.8.2
  * NOTE: Downgrade to 0.7.x or below is not possible.
    Due to fixes in the TPM 2 prime number generation code in
    rev155 it is not possible to downgrade from libtpms version
    0.8.0 to some previous version. The seeds are now associated
    with an age so that older seeds use the old TPM 2 prime number
    generation code while newer seed use the newer code.
  * tpm2: rev155: Add new RsaAdjustPrimeCandidate code but do
    not use (bsc#1184939 CVE-2021-3505)
  * tpm2: Activate SEED_COMPAT_LEVEL_RSA_PRIME_ADJUST_FIX
    (bsc#1184939 CVE-2021-3505)
  * Update to TPM 2 code release 159
  - X509 support is enabled
    + SM2 signing of ceritificates is NOT supported
  - Authenticated timers are disabled
  * Update to TPM 2 code relase 162
  - ECC encryption / decryption is disabled
  * Fix support for elliptic curve due to missing unmarshalling
    code
  * Runtime filter supported elliptic curves supported by OpenSSL
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rather than
    max
  * Fixes to symmetric decryption related to input size check,
    defer padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)]
    and to always use a temporary malloc'ed buffer for decryption
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest swtpm for test cases to succeed there.</changelog>
  <changelog author="pgajdos@suse.com" date="1630411200">- security update
- added patches
  fix CVE-2021-3746 [bsc#1189935], out-of-bounds access via specially crafted TPM 2 command packets
  + libtpms-CVE-2021-3746.patch</changelog>
  <changelog author="meissner@suse.com" date="1666353600">- Added patches:
  0001-tpm2-Reset-TPM2B-buffer-sizes-after-test-fails-for-v.patch
  0002-tpm2-Add-maxSize-parameter-to-TPM2B_Marshal-for-sani.patch
  0003-tpm2-Restore-original-value-if-unmarsalled-value-was.patch
- CVE-2021-3623: Fixed out-of-bounds access when trying to resume the
  state of the vTPM (bsc#1187767)</changelog>
  <changelog author="pgajdos@suse.com" date="1669377600">- fix build for ppc64le: use -Wl,--no-as-needed in check-local
  [bsc#1204556]</changelog>
  <changelog author="meissner@suse.com" date="1682424000">- 0001-tpm2-Check-size-of-buffer-before-accessing-it-CVE-20.patch:
  Fixes CVE-2023-1017 &amp; CVE-2023-1018: fixed memory corruptions in CryptParameterDecryption (bsc#1206022 bsc#1206023)</changelog>
</package>
<package pkgid="15b805948206de7a7071b0235cb84fd68c2273dc16d6e0223289835c5a757e0c" name="libtpms0" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="150300.3.9.1"/>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 0.5.2
  * No entry for this release
- Update project home and download Urls
- Add autoconf, automake and libtool build require; the tarball
  comes from git and configure script has to be generated</changelog>
  <changelog author="vcizek@suse.com" date="1516190400">- Update to version 0.6.0-dev1
  * no upstream changelog
  * fix build with openssl 1.1 (bsc#1074801)
- fix rpm group</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Update to version 0.6.0
  * Introduce TPM2 support
- Use %license tag for LICENSE</changelog>
  <changelog author="glin@suse.com" date="1567684800">- Update to version 0.7.0
  * fixes for TPM2
- Add gcc-c++ to BuildRequires</changelog>
  <changelog author="kai.liu@suse.com" date="1595505600">- Update to version 0.7.3
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest `swtpm` (master, stable branches) for test cases to
    succeed there.
- Changes since version 0.7.2
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rathern than
    max. possible
  * Fixes to symmetric decrytion related to input size check, defer
    padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)] and to
    always use a temporary malloc'ed buffer for decryption
- Changes since version 0.7.1
  * tpm2: Fix TDES key creation by adding missing un-/marshalling
    functions
  * tpm2: Fix a bug in CheckAuthSession
  * compilation fixes for TPM 1.2 &amp; TPM 2 and various architectures
    and gcc versions
  * Fix support for NIST curves P{192,224,521} and SM2 P256 and
    BNP648 that would not work;
  * Runtime filter elliptic curves (that OpenSSL does not support)
    and do not advertise those curves as capabilities
  * Removed unnecessary space in MANUFACTURER "IBM " -&gt; "IBM"</changelog>
  <changelog author="glin@suse.com" date="1606132800">- Update to version 0.7.4
  * Addressed potential constant-time related issues in TPM 1.2 and
    TPM 2 code
    TPM 1.2: RSA decryption
    TPM 2: EcSchnorr and EcSM2 signatures; Ecsda is handled by OpenSSL
  * Fixed some compilation issues</changelog>
  <changelog author="glin@suse.com" date="1616155200">- Update to version 0.7.7
  * CryptSym: fix AES output IV (bsc#1183729, CVE-2021-3446)
  * tpm2: Fix public key context save due to ANY_OBJECT_Marshal usage
  * tpm2: Address some Coverity issues (false positives)
  * tpm1.2: Backported ASAN/UBSAN related fixes
  * tpm2: Return properly sized array for b parameter for NIST P521
    (HLK)
  * tpm2: Addressed issues detected by UBSAN
  * tpm2: Addressed issues detected by cppcheck (false positives)</changelog>
  <changelog author="glin@suse.com" date="1618833600">- Update to version 0.8.2
  * NOTE: Downgrade to 0.7.x or below is not possible.
    Due to fixes in the TPM 2 prime number generation code in
    rev155 it is not possible to downgrade from libtpms version
    0.8.0 to some previous version. The seeds are now associated
    with an age so that older seeds use the old TPM 2 prime number
    generation code while newer seed use the newer code.
  * tpm2: rev155: Add new RsaAdjustPrimeCandidate code but do
    not use (bsc#1184939 CVE-2021-3505)
  * tpm2: Activate SEED_COMPAT_LEVEL_RSA_PRIME_ADJUST_FIX
    (bsc#1184939 CVE-2021-3505)
  * Update to TPM 2 code release 159
  - X509 support is enabled
    + SM2 signing of ceritificates is NOT supported
  - Authenticated timers are disabled
  * Update to TPM 2 code relase 162
  - ECC encryption / decryption is disabled
  * Fix support for elliptic curve due to missing unmarshalling
    code
  * Runtime filter supported elliptic curves supported by OpenSSL
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rather than
    max
  * Fixes to symmetric decryption related to input size check,
    defer padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)]
    and to always use a temporary malloc'ed buffer for decryption
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest swtpm for test cases to succeed there.</changelog>
  <changelog author="pgajdos@suse.com" date="1630411200">- security update
- added patches
  fix CVE-2021-3746 [bsc#1189935], out-of-bounds access via specially crafted TPM 2 command packets
  + libtpms-CVE-2021-3746.patch</changelog>
  <changelog author="meissner@suse.com" date="1666353600">- Added patches:
  0001-tpm2-Reset-TPM2B-buffer-sizes-after-test-fails-for-v.patch
  0002-tpm2-Add-maxSize-parameter-to-TPM2B_Marshal-for-sani.patch
  0003-tpm2-Restore-original-value-if-unmarsalled-value-was.patch
- CVE-2021-3623: Fixed out-of-bounds access when trying to resume the
  state of the vTPM (bsc#1187767)</changelog>
  <changelog author="pgajdos@suse.com" date="1669377600">- fix build for ppc64le: use -Wl,--no-as-needed in check-local
  [bsc#1204556]</changelog>
  <changelog author="meissner@suse.com" date="1682424000">- 0001-tpm2-Check-size-of-buffer-before-accessing-it-CVE-20.patch:
  Fixes CVE-2023-1017 &amp; CVE-2023-1018: fixed memory corruptions in CryptParameterDecryption (bsc#1206022 bsc#1206023)</changelog>
</package>
<package pkgid="cc5d5dc44076c35f736a4b6c3281d9b6d124721fdaca0b38a85378e999ccb115" name="libudev1" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="9cf616608db09497d2bdfd9fdeaa8aab51b3e9066a77c4449449af951f88b1e3" name="libudev1" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="11b947f50aaecf5cb4e0f3518cc7746629fcc5c4761ded51970cf6953e40c619" name="libudev1" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="b27c7dd69345d3678e281f8571e08ef4a38b594b946cf0d6f59abe73de721536" name="libuuid1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="66ed462ae6ff293b0e71da6fe19330d823d0f7fafbc96eede4f599a51ffa28bc" name="libuuid1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="20676f27d286a9318f565296d2c9ed27964151cf35629ae795f93953b9c0773f" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="5c175322a83f95938bf7b287035ba4332855e2d3ad19a469a571bbfb691f8082" name="libvirt" arch="src">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="a1b657b3844b00cf5e99a2b321a78c6a1b0de96c97c556bfaedbc4d0c0232543" name="libvirt-client" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="a82c329e3c9c1968b67fb175cd0a9a465a985ddbe4bab269903139fe636ba8c6" name="libvirt-client" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="90701d05cc056340c4fb4493e72808fd00a04a6e16596867bd0d2fc06034ddcd" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="d86cbd2fe94c7cff2988ebea8e4e04b382822a17c7f70192eef16c58b57b2673" name="libvirt-daemon" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="481fec72fab1e1afd8c86b02490433f822540ad6e239b2c0fc63a1f7c63e514d" name="libvirt-daemon" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="2f4ab37d6cd91716ecc852f498396c0d145546fa69db84107b65850f657e21c5" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="a0b0916e4145a957c0de0c7ebfdb4a82ded5530c5c0d379106312c4bb96ff8e4" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="55b13763faf72bb38547f0c73be25c2b88945ba7224b6c3ca739caac917fd589" name="libvirt-daemon-driver-interface" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="19599f57df7989a869156445843a819791edc83a3d8ffd544bf9a2dc4c428dcf" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="bc08c840d2a036b27d7e8e60c6fc375e2bf03d6fb7b770d981b08db4d6d5bcb9" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="4559b906582c279ae7b0796af6ea07196306142852a7a462131d61bb2ea7d9e1" name="libvirt-daemon-driver-network" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="879ae0f2bac0f238f07fd95479b9c6938fec7ab0a9a4cfd8228eab88c1f71759" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="071dcbf1db95becf49c95a637c1667669266f18f25a3eb6f775f0afd6833f654" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="29a42a4d9bb2e00ec7c4f7b59a77a653f0b34b492b880eb3b3e516211db2162a" name="libvirt-daemon-driver-nodedev" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="c809a54ec2a6d6bf10b5aecc1aab3e9d75ce96f7f0b92b2742053c24ed1f7f8b" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="bc310d52f239765f88ac4902fe76ff867bf7ca0574c163225c8822cfa564168d" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="451c05bfbf9da2b84d7b99bf0a7f036f2cef064411faaca1a1f84572161f02e2" name="libvirt-daemon-driver-nwfilter" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="6588119a2a65cb917f1edebca540d8e2430de9277a83665a6faa71c9f1c6e264" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="4f5d5c18bffd1316285efc0187bada67305ff7da7637162a7caae221be8d4a4a" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="53872f3b15ca5cec1d9ccca9e50830759eea17a0217a9002298ab7b2581ec259" name="libvirt-daemon-driver-qemu" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="dbd22803d6ba6ab01e53e1521e56b496140fb92ad020d2ee058a6505edb3a01f" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="f22ebe1e07134a897bb424f77c98a2012493fcb1e0c7a0c9bd94a61aae99b3ee" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="2e0b6170d14a71487d456cde00fca99f5fcfb315a820dd8868f1ffcc4323eddd" name="libvirt-daemon-driver-secret" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="8c6cb24acd15af6227464ed73dae28a72380d765af5547f2894e1d6f7fca5559" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="8480c1cc23e729cfa7d3b60a6309d4040f6d813f02752c1fbd276c32b34fd422" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="b5eaac156c46aab594cf82958fb7e2b6f9f5b1e2f47cfa92105438a8a6f84ad1" name="libvirt-daemon-driver-storage" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="bca498961b49acdea7633189522f4229b13c5392f17f02f891ef0b7590278b8b" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="559918bdbd0717ffd8bc645ef206156d7434c3b8780bbfdd9f2d570ee2a92f09" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="f720c2d52e35cdb06524c26384d113c2e7d96f56ec40ac9e615877bcbc9e4489" name="libvirt-daemon-driver-storage-core" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="27debdac2b35c4fa19dae345981e03572fb4ee5c8548314d98acce3a871aaf3b" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="eabab9109f8decdf35d189c2cc10593bbddeba97e44b8d236c00a043d2b8236b" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="70d274f8d3a3b380f8fc8dc63fe40eb6073b034f1725773848b43a59210faecf" name="libvirt-daemon-driver-storage-disk" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="622fd26cb17763622f28f6051397850c0ec66cb953aa28171fd82a063e1410ab" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="9959d187a17d802d70f6a1f4b85634d0b38d7258f0b733343d8d54b1509a8e46" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="b5a93652c6ace5dc1bfbe4455660347f1ed9bf5757cc3281d27d31935851ff2e" name="libvirt-daemon-driver-storage-iscsi" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="a224554c27770c0841c156e0617bbb3c5de6972fe7fabcae766af3758b90dbe2" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="c9f8f58dfb6528ea55ddf5617d63912e7ebb8269609f9b4ee25004d9bde9ab6f" name="libvirt-daemon-driver-storage-iscsi-direct" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="4a11fa3dd42ec7b1d4017e2b98dd731488359330fda5ce8fc4c54cee8bce6eda" name="libvirt-daemon-driver-storage-iscsi-direct" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="9663f012d8388c53131b1a84ea96e03af70c32ae37d92777fd56b0ad5dafd372" name="libvirt-daemon-driver-storage-iscsi-direct" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="f8c2ba725e26d9565f947ad8e380a5f5bf72be66ed23c0e6a7f6045bc5ee17a5" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="5e75f29480dc017814b97cd9751c7427f39bdef7b08ed8dbc4a2ecb70f81ee22" name="libvirt-daemon-driver-storage-logical" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="9853bb2199464bbb9c68fe216e7e1e616a3898877a9402788f0f34629fa0f2ba" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="d924730fcaa486c2efee97aef9fc710d73783cee53d18d157cd92b49500481bb" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="090f94c40d642313d082c977c502f918a468709948075ccc8089e9e2c6b8c901" name="libvirt-daemon-driver-storage-mpath" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="60084006517f209a80fb29308b0af5135c442542ea65af1e50ac4fad2a5d830c" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="812e01690010fcd4afd7695f219bb6e27faed541e3bfa5eb4abab1c6f84ca495" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="af24ae8fcbc43386f05eb025132ce2aa6e212cf43a048a196c6911bbbfc5c889" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="cfb23b26ab9b31f1ef51b835d0d8b2706920fceaad573ba4f1898a88306074e6" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="2eecc5da2f9904f4b24550f34517b3bb5160b112402bc06ae4f6950808109da0" name="libvirt-daemon-driver-storage-scsi" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="e708613fd39e80d541eca2da2c0ab0db9d40718bad11c80f1bdffda5c29bb45e" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="58278e2762a3c18bde8b5ad48f39f9589799fe8a1a79efeed39f86366c174c49" name="libvirt-daemon-qemu" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="458935cbba92117f97024ab757bde9a3feebbbe2eb295aa4ca6436e9490ae794" name="libvirt-daemon-qemu" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="1d40a5ad2a14547cde3433abd32755a377704a7d6dec2e96b181a6d42268ec68" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="3f4bbb81cb5e19dee40156c51d2e76250fd8d56592e5170bbf616f27f6189f2c" name="libvirt-libs" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="2802dbae13cf15154739f114c9c2442b2b55609030bd7b1c10a2dcb3307ba23d" name="libvirt-libs" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="0e2d0bac00fd4bebcf4ce3425e6940862a0cc8e46cd4fb06dc4b83a68a564911" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="3c71cd2d87348583e48420d4ae1c38bd8f198115f27a70ad2b187712a0f31107" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.2.0" rel="150300.26.1"/>
  <changelog author="kallan@suse.com" date="1598616000">- Update to 11.1.5 (build 16724464) (boo#1175573)
  + This source release rolls up the SDMP fixes release post 11.1.0.
  + Fix serveral Coverity reported issues.
  + Address github issues:
    https://github.com/vmware/open-vm-tools/issues/451
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/issues/428
- Drop unnecessary patch:
  - gcc10-warning.patch
  - sdmp-get-version.patch
  - sdmp-netstat-to-ss.patch
  - sdmp-warnings.patch</changelog>
  <changelog author="schwab@suse.de" date="1599480000">- Use libtirpc also in SLE-15-SP3</changelog>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
</package>
<package pkgid="feeecc23452cb516e0003738a22f98544f8279e4ec2265b296d1798a5caa6623" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="1ddf550f86cf56a00108aec0541bbdc84fdc3a07cd1212b7d8ede3deecc2277b" name="libxml2-2" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="c0917e9972c3938ca3c41fac80a6dd5f0e334c96997cbb1a0eb5dd5238988960" name="libxml2-2" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="6af84feb02e15c49ec71068c124fc6f95405a9e088491c5316a44d0675237a23" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="0686e80a7cd2121d5cde4345002733e15cbffb06b760612b946718b14aaf9645" name="libxml2-2" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="6e1c6c2dc836f21357b397db347366c1c53be31b7b859ed6163d16d942ba98f4" name="libxml2-2" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="10515acb8f7ca0cbaf48daf72ed1d10e8dad06088c3796c24fd5de35e25fec26" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="d675986f509767ba1c4bb8a12be997b8df5b0fce3bc90afb3aad3076aa125349" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="4d42cf5b5980d4b030c79168e645e7f0d354ffd7239a30f0418a19b31dec5c1d" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="24331ffa24f9eb8c72658d70c4f72ebb4922a2d4be714725004f4e23f53126fc" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="098b2e6366b524ec7b19c18f4d88c20f4c043ee7b8413c22265e750f576935f4" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="89cfee990d037245ad393a58838965a4c4428b383d81460e789f2d22806818d7" name="libxml2-tools" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="78f886170f5bdf8f44892527565f424a1d0237a36946e02854616783189e47e4" name="libxml2-tools" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="162c6535dc1c63f65198270a248f96b67f9a17349a0b189fe4cd21b63a4074f5" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="1b4935b91ed6f5bf2fd244523c39cad196dbc00d0da28a591bc129e3355a3c41" name="libxml2-tools" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="6ec77b6684b74a20933ad30bf30bd4a28fa0f4a72a4b9882675ed56f6c703018" name="libxml2-tools" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="636b34f4eda670cac89ce9edf8ffb081d9864062c6f49a56a5df8ebca05c8643" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="777f51d7867eac847a2022632b3000a3b49914828f0516d8e77f12df5e041a9d" name="libz1" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="150000.3.42.1"/>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
</package>
<package pkgid="867d936041d93e7bba5fa0cd835656331a7c1d2dc57877fa2f039b01437f205c" name="libz1" arch="s390x">
  <version epoch="0" ver="1.2.11" rel="150000.3.42.1"/>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
</package>
<package pkgid="f5f6281c54cd1bb2d7a4bb382d9fa9c2b08ada3246cda3019ef99a238b3f32ec" name="libz1" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="150000.3.42.1"/>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
</package>
<package pkgid="6eab83f28c3664da766130270fb508c9c617984cdc6958c00a52d3bbe8878408" name="libz1" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="150000.3.45.1"/>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683028800">- Fix deflateBound() before deflateInit(), bsc#1210593
  bsc1210593.patch</changelog>
</package>
<package pkgid="3e805d83068520a349006758156a645827ba002042156b63c6e52fed4511575c" name="libz1" arch="s390x">
  <version epoch="0" ver="1.2.11" rel="150000.3.45.1"/>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683028800">- Fix deflateBound() before deflateInit(), bsc#1210593
  bsc1210593.patch</changelog>
</package>
<package pkgid="da49de86280f07d3ae7020f21eb5271832154b624a44f867b37121156205cd0f" name="libz1" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="150000.3.45.1"/>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683028800">- Fix deflateBound() before deflateInit(), bsc#1210593
  bsc1210593.patch</changelog>
</package>
<package pkgid="ea3c415e3a6f9051643eff0ac971510fc507fc475883b6760bf43251a4209969" name="libzck1" arch="aarch64">
  <version epoch="0" ver="1.1.16" rel="150400.3.4.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
</package>
<package pkgid="4221d63f17a773a1eba07e5c6868eb06edef4aa6910fbdbe54686f652fee3d6b" name="libzck1" arch="s390x">
  <version epoch="0" ver="1.1.16" rel="150400.3.4.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
</package>
<package pkgid="d38b1fe6a42bf61feb885c48f5b7e067b60d6a3bba08abd60ab920bfbfd6aa51" name="libzck1" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="150400.3.4.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
</package>
<package pkgid="deeb52655c34786e5703051811baca16c473e3176223dcd4312032d4edf7d89f" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="e0c6f897bce261ea63171a66fd9cd507bdd1f99c854e639706d789f62bf24040" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="e266c198877a2ce39c29d12fc849b8ec88d846306eebbc305562ab937d59f750" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="3d1da0ce2f4978795a0a9ca168e6379dc610931f3efa8d78258a2129169b7326" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="90e4c2b315247bb439083ea0cc07f99d536cefd751c3e041f14cef6735a73247" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="18afe7e4a0eba26b5bc446fbb40053c4011a5d3796f7e61e99e93c8f6f8a4493" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="021597161e769b08d075de06eaef87f6a1e1ae5c18f232d8984cf40f2db05949" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="2d74f4e1a00f6689a61ddda4ddf09b40b344e62595357018d21d0b86f727c23e" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="0f322477ed3b45ed44f95fb40c8eaee85fb6d2912d827952c2f6e8ce4c450a6f" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="dbc2d352983e444d81bfa905a9a5e618fda306ce7d9253ceffa0fee3aa02b10b" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="5d10516847ac29a7dc3deb7ef3a4dffacb3dd4307b27e87d93f4a324f71e2511" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="f83012dee3d3af42513f61caf297bb03db25afded2e6bdaea6f294226510e05a" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="e6c9d7e627adae6e84e0384ab638d4bd728bb49284d598ab6d64ebb79acf27b0" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="55e3dcf747e4fe16a7bed3e3d0d4ccf801585d42f2c264fd23d57035a6e10265" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="cffe05155518f147225108fa735656c3c1c46e04cd9e2aad1a136b4aa2269a9c" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="dca51b0b959645a90191dbcec05ca2fb37bec92895f42cf623c9c336d2549c78" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="ca0f38a8228ff472be9123d190558bd0a2b599d3f23372071e742d2098369df3" name="linux-glibc-devel" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150400.6.6.1"/>
  <changelog author="schwab@suse.de" date="1557230400">- Update to kernel headers 5.1</changelog>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="911d835febce4514e958ae8948857d758f74efdffa9b2b77d8f4335736cf8d1f" name="linux-glibc-devel" arch="s390x">
  <version epoch="0" ver="5.14" rel="150400.6.6.1"/>
  <changelog author="schwab@suse.de" date="1557230400">- Update to kernel headers 5.1</changelog>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="8de423a78b677c62f1dbfbec8d828f32a43ca2f40b79e9a9158df41c1678e87f" name="linux-glibc-devel" arch="src">
  <version epoch="0" ver="5.14" rel="150400.6.6.1"/>
  <changelog author="schwab@suse.de" date="1557230400">- Update to kernel headers 5.1</changelog>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="22ba49f5bc0268f057f3a19883e304c0ef1e5539d1ef08f592fed01fbe14bb34" name="linux-glibc-devel" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150400.6.6.1"/>
  <changelog author="schwab@suse.de" date="1557230400">- Update to kernel headers 5.1</changelog>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="fd241ab2ef213cb40f16c8fa5e760ade7c804e06f5fd5264850079f1e3fc09c9" name="lshw" arch="aarch64">
  <version epoch="0" ver="B.02.19.2+git.20230320" rel="150200.3.15.4"/>
  <changelog author="mpluskal@suse.com" date="1571918400">- Update to version B.02.18+git.20190613 (fate#326432 jsc#SLE-7715):
  * devtree: Add DIMM running speed
  * spd: Print dimm rank information
  * Display proper logical name of network device
- Drop no longer needed lswh-logical-name-iface.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1580904000">- Fix bsc#1162690:
  * lshw-add-notime-option-to-manpage.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581076800">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="mpluskal@suse.com" date="1582200000">- Disable LTO as it causes random build failures on some
  architectures (bsc#1164297)</changelog>
  <changelog author="mpluskal@suse.com" date="1584360000">- Update to version B.02.18+git.20191228:
  * fix #755: handle invalid FAT
  * code clean-up
  * volumes: Add support for detecting Apple APFS fstype
  * partitions: Add Apple APFS GUID
  * specfile: Fix version issue
  * Do not show modified time with -notime option
  * Update help message and man page
- Drop upstreamed patches:
  * lshw-help-man.patch
  * lshw-modified-time.patch
- Add lshw-nvme.patch to support nvme devices bsc#1161323</changelog>
  <changelog author="mpluskal@suse.com" date="1585569600">- Update to version B.02.19.2:
  * New release tagged, no significant changes from previous
    version (git snapsho)
- Drop no longer needed patches:
  * lshw-display-latest-version.patch
  * lshw-add-notime-option-to-manpage.patch
  * lshw-nvme.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1587643200">- Disable LTO for aarch64 &amp; PowerPC, bypass boo#1168865</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1587729600">- Reenable LTO for powerpc and aarch64
- Fix PowerPC and aarch64 LTO: boo#1168865 and boo#1169668
  * lshw-fix-segfault-in-apfs-volume-code.patch
- Fix aarch64 SIGABRT: (boo#1169668)
  * lshw-fix-mmc.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1598875200">- Fix detection of ppc products - boo#1172156
  * lshw-fix-ppc.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1611662400">- Display UUID on Power VM LPAR (bsc#1181411 ltc#191040)
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1622030400">- Update to version B.02.19+git.20210429:
  * Fix getting size of memory banks &lt;32GiB
  * devtree: Add UUID property
  * code clean-up
  * improve portability (esp. musl)
  * fix potential crash
  * add static target to Makefile
  * Avoid crash on device-tree parsing
  * Add JEDEC manufacturer
  * Report correct memory size on SMBIOS &lt; 2.7
  * fix man page after previous update
- Drop no longer needed patches:
  * lshw-fix-segfault-in-apfs-volume-code.patch
  * lshw-fix-mmc.patch
  * lshw-fix-ppc.patch
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1624536000">- Update to version B.02.19+git.20210619:
  * Fix typos in translatable messages
- jsc#SLE-19399</changelog>
  <changelog author="mpluskal@suse.com" date="1628078400">- Update versioning to to allow easy transition on SLE
- Disable parallel build to avoid random failures</changelog>
  <changelog author="mpluskal@suse.com" date="1634212800">- Update to version B.02.19.2+git.20211013:
  * add some includes
  * fix typo
  * cosmetic fixes
  * support for new ethtool capabilities
  * code clean-up
  * code clean-up
  * allow pkg-config override
  * allow pkg-config override
  * Remove unnecessary space before closing parenthesis
  * Translate all words of a phrase together
  * Fix another typo</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version B.02.19.2+git.20211102:
  * merge Github PR#77
  * use max (9) Gzip compression
  * Add Catalan translation
  * Update POT file
  * Add more network speeds</changelog>
  <changelog author="mpluskal@suse.com" date="1642766400">- Update to version B.02.19.2+git.20211222:
  * Add Spanish translation
  * Fix mistakes in Catalan translation</changelog>
  <changelog author="mpluskal@suse.com" date="1648468800">- Update to version B.02.19.2+git.20220310:
  * Github PR85  Set product name for all netdevs sharing the same PCI number</changelog>
  <changelog author="mpluskal@suse.com" date="1658836800">- Update to version B.02.19.2+git.20220628 (jsc#526):
  * make version check optional</changelog>
  <changelog author="mpluskal@suse.com" date="1669291200">- Update to version B.02.19.2+git.20220831:
  * PA-RISC: handle pushd failure</changelog>
  <changelog author="mpluskal@suse.com" date="1679572800">- Update to version B.02.19.2+git.20230320 (bsc#1209531):
  * fix NVMe multipath detection
  * NVMe: fix logical name with native multipath</changelog>
</package>
<package pkgid="b868457678ef6316ce45592d2e6a6bfd2a690273f7b74d42367f5c8aef70f379" name="lshw" arch="s390x">
  <version epoch="0" ver="B.02.19.2+git.20230320" rel="150200.3.15.4"/>
  <changelog author="mpluskal@suse.com" date="1571918400">- Update to version B.02.18+git.20190613 (fate#326432 jsc#SLE-7715):
  * devtree: Add DIMM running speed
  * spd: Print dimm rank information
  * Display proper logical name of network device
- Drop no longer needed lswh-logical-name-iface.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1580904000">- Fix bsc#1162690:
  * lshw-add-notime-option-to-manpage.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581076800">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="mpluskal@suse.com" date="1582200000">- Disable LTO as it causes random build failures on some
  architectures (bsc#1164297)</changelog>
  <changelog author="mpluskal@suse.com" date="1584360000">- Update to version B.02.18+git.20191228:
  * fix #755: handle invalid FAT
  * code clean-up
  * volumes: Add support for detecting Apple APFS fstype
  * partitions: Add Apple APFS GUID
  * specfile: Fix version issue
  * Do not show modified time with -notime option
  * Update help message and man page
- Drop upstreamed patches:
  * lshw-help-man.patch
  * lshw-modified-time.patch
- Add lshw-nvme.patch to support nvme devices bsc#1161323</changelog>
  <changelog author="mpluskal@suse.com" date="1585569600">- Update to version B.02.19.2:
  * New release tagged, no significant changes from previous
    version (git snapsho)
- Drop no longer needed patches:
  * lshw-display-latest-version.patch
  * lshw-add-notime-option-to-manpage.patch
  * lshw-nvme.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1587643200">- Disable LTO for aarch64 &amp; PowerPC, bypass boo#1168865</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1587729600">- Reenable LTO for powerpc and aarch64
- Fix PowerPC and aarch64 LTO: boo#1168865 and boo#1169668
  * lshw-fix-segfault-in-apfs-volume-code.patch
- Fix aarch64 SIGABRT: (boo#1169668)
  * lshw-fix-mmc.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1598875200">- Fix detection of ppc products - boo#1172156
  * lshw-fix-ppc.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1611662400">- Display UUID on Power VM LPAR (bsc#1181411 ltc#191040)
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1622030400">- Update to version B.02.19+git.20210429:
  * Fix getting size of memory banks &lt;32GiB
  * devtree: Add UUID property
  * code clean-up
  * improve portability (esp. musl)
  * fix potential crash
  * add static target to Makefile
  * Avoid crash on device-tree parsing
  * Add JEDEC manufacturer
  * Report correct memory size on SMBIOS &lt; 2.7
  * fix man page after previous update
- Drop no longer needed patches:
  * lshw-fix-segfault-in-apfs-volume-code.patch
  * lshw-fix-mmc.patch
  * lshw-fix-ppc.patch
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1624536000">- Update to version B.02.19+git.20210619:
  * Fix typos in translatable messages
- jsc#SLE-19399</changelog>
  <changelog author="mpluskal@suse.com" date="1628078400">- Update versioning to to allow easy transition on SLE
- Disable parallel build to avoid random failures</changelog>
  <changelog author="mpluskal@suse.com" date="1634212800">- Update to version B.02.19.2+git.20211013:
  * add some includes
  * fix typo
  * cosmetic fixes
  * support for new ethtool capabilities
  * code clean-up
  * code clean-up
  * allow pkg-config override
  * allow pkg-config override
  * Remove unnecessary space before closing parenthesis
  * Translate all words of a phrase together
  * Fix another typo</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version B.02.19.2+git.20211102:
  * merge Github PR#77
  * use max (9) Gzip compression
  * Add Catalan translation
  * Update POT file
  * Add more network speeds</changelog>
  <changelog author="mpluskal@suse.com" date="1642766400">- Update to version B.02.19.2+git.20211222:
  * Add Spanish translation
  * Fix mistakes in Catalan translation</changelog>
  <changelog author="mpluskal@suse.com" date="1648468800">- Update to version B.02.19.2+git.20220310:
  * Github PR85  Set product name for all netdevs sharing the same PCI number</changelog>
  <changelog author="mpluskal@suse.com" date="1658836800">- Update to version B.02.19.2+git.20220628 (jsc#526):
  * make version check optional</changelog>
  <changelog author="mpluskal@suse.com" date="1669291200">- Update to version B.02.19.2+git.20220831:
  * PA-RISC: handle pushd failure</changelog>
  <changelog author="mpluskal@suse.com" date="1679572800">- Update to version B.02.19.2+git.20230320 (bsc#1209531):
  * fix NVMe multipath detection
  * NVMe: fix logical name with native multipath</changelog>
</package>
<package pkgid="882669a5c5297b02a7cacb23dc2c2dade536757b960899f1afa8ac23e3fbbbd6" name="lshw" arch="src">
  <version epoch="0" ver="B.02.19.2+git.20230320" rel="150200.3.15.4"/>
  <changelog author="mpluskal@suse.com" date="1571918400">- Update to version B.02.18+git.20190613 (fate#326432 jsc#SLE-7715):
  * devtree: Add DIMM running speed
  * spd: Print dimm rank information
  * Display proper logical name of network device
- Drop no longer needed lswh-logical-name-iface.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1580904000">- Fix bsc#1162690:
  * lshw-add-notime-option-to-manpage.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581076800">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="mpluskal@suse.com" date="1582200000">- Disable LTO as it causes random build failures on some
  architectures (bsc#1164297)</changelog>
  <changelog author="mpluskal@suse.com" date="1584360000">- Update to version B.02.18+git.20191228:
  * fix #755: handle invalid FAT
  * code clean-up
  * volumes: Add support for detecting Apple APFS fstype
  * partitions: Add Apple APFS GUID
  * specfile: Fix version issue
  * Do not show modified time with -notime option
  * Update help message and man page
- Drop upstreamed patches:
  * lshw-help-man.patch
  * lshw-modified-time.patch
- Add lshw-nvme.patch to support nvme devices bsc#1161323</changelog>
  <changelog author="mpluskal@suse.com" date="1585569600">- Update to version B.02.19.2:
  * New release tagged, no significant changes from previous
    version (git snapsho)
- Drop no longer needed patches:
  * lshw-display-latest-version.patch
  * lshw-add-notime-option-to-manpage.patch
  * lshw-nvme.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1587643200">- Disable LTO for aarch64 &amp; PowerPC, bypass boo#1168865</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1587729600">- Reenable LTO for powerpc and aarch64
- Fix PowerPC and aarch64 LTO: boo#1168865 and boo#1169668
  * lshw-fix-segfault-in-apfs-volume-code.patch
- Fix aarch64 SIGABRT: (boo#1169668)
  * lshw-fix-mmc.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1598875200">- Fix detection of ppc products - boo#1172156
  * lshw-fix-ppc.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1611662400">- Display UUID on Power VM LPAR (bsc#1181411 ltc#191040)
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1622030400">- Update to version B.02.19+git.20210429:
  * Fix getting size of memory banks &lt;32GiB
  * devtree: Add UUID property
  * code clean-up
  * improve portability (esp. musl)
  * fix potential crash
  * add static target to Makefile
  * Avoid crash on device-tree parsing
  * Add JEDEC manufacturer
  * Report correct memory size on SMBIOS &lt; 2.7
  * fix man page after previous update
- Drop no longer needed patches:
  * lshw-fix-segfault-in-apfs-volume-code.patch
  * lshw-fix-mmc.patch
  * lshw-fix-ppc.patch
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1624536000">- Update to version B.02.19+git.20210619:
  * Fix typos in translatable messages
- jsc#SLE-19399</changelog>
  <changelog author="mpluskal@suse.com" date="1628078400">- Update versioning to to allow easy transition on SLE
- Disable parallel build to avoid random failures</changelog>
  <changelog author="mpluskal@suse.com" date="1634212800">- Update to version B.02.19.2+git.20211013:
  * add some includes
  * fix typo
  * cosmetic fixes
  * support for new ethtool capabilities
  * code clean-up
  * code clean-up
  * allow pkg-config override
  * allow pkg-config override
  * Remove unnecessary space before closing parenthesis
  * Translate all words of a phrase together
  * Fix another typo</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version B.02.19.2+git.20211102:
  * merge Github PR#77
  * use max (9) Gzip compression
  * Add Catalan translation
  * Update POT file
  * Add more network speeds</changelog>
  <changelog author="mpluskal@suse.com" date="1642766400">- Update to version B.02.19.2+git.20211222:
  * Add Spanish translation
  * Fix mistakes in Catalan translation</changelog>
  <changelog author="mpluskal@suse.com" date="1648468800">- Update to version B.02.19.2+git.20220310:
  * Github PR85  Set product name for all netdevs sharing the same PCI number</changelog>
  <changelog author="mpluskal@suse.com" date="1658836800">- Update to version B.02.19.2+git.20220628 (jsc#526):
  * make version check optional</changelog>
  <changelog author="mpluskal@suse.com" date="1669291200">- Update to version B.02.19.2+git.20220831:
  * PA-RISC: handle pushd failure</changelog>
  <changelog author="mpluskal@suse.com" date="1679572800">- Update to version B.02.19.2+git.20230320 (bsc#1209531):
  * fix NVMe multipath detection
  * NVMe: fix logical name with native multipath</changelog>
</package>
<package pkgid="110d593c4288027e71f505879ebd154ba828b0c43df8d31b4f5f91795cf82976" name="lshw" arch="x86_64">
  <version epoch="0" ver="B.02.19.2+git.20230320" rel="150200.3.15.4"/>
  <changelog author="mpluskal@suse.com" date="1571918400">- Update to version B.02.18+git.20190613 (fate#326432 jsc#SLE-7715):
  * devtree: Add DIMM running speed
  * spd: Print dimm rank information
  * Display proper logical name of network device
- Drop no longer needed lswh-logical-name-iface.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1580904000">- Fix bsc#1162690:
  * lshw-add-notime-option-to-manpage.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581076800">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="mpluskal@suse.com" date="1582200000">- Disable LTO as it causes random build failures on some
  architectures (bsc#1164297)</changelog>
  <changelog author="mpluskal@suse.com" date="1584360000">- Update to version B.02.18+git.20191228:
  * fix #755: handle invalid FAT
  * code clean-up
  * volumes: Add support for detecting Apple APFS fstype
  * partitions: Add Apple APFS GUID
  * specfile: Fix version issue
  * Do not show modified time with -notime option
  * Update help message and man page
- Drop upstreamed patches:
  * lshw-help-man.patch
  * lshw-modified-time.patch
- Add lshw-nvme.patch to support nvme devices bsc#1161323</changelog>
  <changelog author="mpluskal@suse.com" date="1585569600">- Update to version B.02.19.2:
  * New release tagged, no significant changes from previous
    version (git snapsho)
- Drop no longer needed patches:
  * lshw-display-latest-version.patch
  * lshw-add-notime-option-to-manpage.patch
  * lshw-nvme.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1587643200">- Disable LTO for aarch64 &amp; PowerPC, bypass boo#1168865</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1587729600">- Reenable LTO for powerpc and aarch64
- Fix PowerPC and aarch64 LTO: boo#1168865 and boo#1169668
  * lshw-fix-segfault-in-apfs-volume-code.patch
- Fix aarch64 SIGABRT: (boo#1169668)
  * lshw-fix-mmc.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1598875200">- Fix detection of ppc products - boo#1172156
  * lshw-fix-ppc.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1611662400">- Display UUID on Power VM LPAR (bsc#1181411 ltc#191040)
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1622030400">- Update to version B.02.19+git.20210429:
  * Fix getting size of memory banks &lt;32GiB
  * devtree: Add UUID property
  * code clean-up
  * improve portability (esp. musl)
  * fix potential crash
  * add static target to Makefile
  * Avoid crash on device-tree parsing
  * Add JEDEC manufacturer
  * Report correct memory size on SMBIOS &lt; 2.7
  * fix man page after previous update
- Drop no longer needed patches:
  * lshw-fix-segfault-in-apfs-volume-code.patch
  * lshw-fix-mmc.patch
  * lshw-fix-ppc.patch
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1624536000">- Update to version B.02.19+git.20210619:
  * Fix typos in translatable messages
- jsc#SLE-19399</changelog>
  <changelog author="mpluskal@suse.com" date="1628078400">- Update versioning to to allow easy transition on SLE
- Disable parallel build to avoid random failures</changelog>
  <changelog author="mpluskal@suse.com" date="1634212800">- Update to version B.02.19.2+git.20211013:
  * add some includes
  * fix typo
  * cosmetic fixes
  * support for new ethtool capabilities
  * code clean-up
  * code clean-up
  * allow pkg-config override
  * allow pkg-config override
  * Remove unnecessary space before closing parenthesis
  * Translate all words of a phrase together
  * Fix another typo</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version B.02.19.2+git.20211102:
  * merge Github PR#77
  * use max (9) Gzip compression
  * Add Catalan translation
  * Update POT file
  * Add more network speeds</changelog>
  <changelog author="mpluskal@suse.com" date="1642766400">- Update to version B.02.19.2+git.20211222:
  * Add Spanish translation
  * Fix mistakes in Catalan translation</changelog>
  <changelog author="mpluskal@suse.com" date="1648468800">- Update to version B.02.19.2+git.20220310:
  * Github PR85  Set product name for all netdevs sharing the same PCI number</changelog>
  <changelog author="mpluskal@suse.com" date="1658836800">- Update to version B.02.19.2+git.20220628 (jsc#526):
  * make version check optional</changelog>
  <changelog author="mpluskal@suse.com" date="1669291200">- Update to version B.02.19.2+git.20220831:
  * PA-RISC: handle pushd failure</changelog>
  <changelog author="mpluskal@suse.com" date="1679572800">- Update to version B.02.19.2+git.20230320 (bsc#1209531):
  * fix NVMe multipath detection
  * NVMe: fix logical name with native multipath</changelog>
</package>
<package pkgid="9955eb36f8bde2a1a83a86994fd05394e88f3ad5e19bcc785c0219aba6ee23fe" name="mdadm" arch="aarch64">
  <version epoch="0" ver="4.1" rel="150300.24.27.1"/>
  <changelog author="colyli@suse.com" date="1581076800">- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0026-Enable-probe_roms-to-scan-more-than-6-roms.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0122-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1676289600">- Update the following patch for (bsc#1207868)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1679313600">- 1011-Improvements-for-IMSM_NO_PLATFORM-testing.patch
- 1012-mdmon-don-t-test-both-all-and-container_name.patch
- 1013-mdmon-change-system-unit-file-to-use-foreground.patch
- 1014-mdmon-compensate-for-removal-of-KillMode-none.patch
- 1015-mdmon-improvements-for-switchroot.patch
- 1016-mdopen-always-try-create_named_array.patch
  Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4
  (bsc#1205493, bsc#1205830)</changelog>
</package>
<package pkgid="2e4a393b3036d0d2a63d067dda5ce6bdb5fa462e1041433429ecc69adb62be5d" name="mdadm" arch="s390x">
  <version epoch="0" ver="4.1" rel="150300.24.27.1"/>
  <changelog author="colyli@suse.com" date="1581076800">- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0026-Enable-probe_roms-to-scan-more-than-6-roms.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0122-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1676289600">- Update the following patch for (bsc#1207868)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1679313600">- 1011-Improvements-for-IMSM_NO_PLATFORM-testing.patch
- 1012-mdmon-don-t-test-both-all-and-container_name.patch
- 1013-mdmon-change-system-unit-file-to-use-foreground.patch
- 1014-mdmon-compensate-for-removal-of-KillMode-none.patch
- 1015-mdmon-improvements-for-switchroot.patch
- 1016-mdopen-always-try-create_named_array.patch
  Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4
  (bsc#1205493, bsc#1205830)</changelog>
</package>
<package pkgid="a3e0b641c32bae704333439cffe759166e63523a3cc8e8fdb09f84cbdcde4f8c" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="150300.24.27.1"/>
  <changelog author="colyli@suse.com" date="1581076800">- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0026-Enable-probe_roms-to-scan-more-than-6-roms.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0122-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1676289600">- Update the following patch for (bsc#1207868)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1679313600">- 1011-Improvements-for-IMSM_NO_PLATFORM-testing.patch
- 1012-mdmon-don-t-test-both-all-and-container_name.patch
- 1013-mdmon-change-system-unit-file-to-use-foreground.patch
- 1014-mdmon-compensate-for-removal-of-KillMode-none.patch
- 1015-mdmon-improvements-for-switchroot.patch
- 1016-mdopen-always-try-create_named_array.patch
  Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4
  (bsc#1205493, bsc#1205830)</changelog>
</package>
<package pkgid="ddee3e1cc01fcaf114259b9eaa76b8e714188e2a44a78c8c7306bb0808753d6b" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.1" rel="150300.24.27.1"/>
  <changelog author="colyli@suse.com" date="1581076800">- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0026-Enable-probe_roms-to-scan-more-than-6-roms.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0122-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1676289600">- Update the following patch for (bsc#1207868)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1679313600">- 1011-Improvements-for-IMSM_NO_PLATFORM-testing.patch
- 1012-mdmon-don-t-test-both-all-and-container_name.patch
- 1013-mdmon-change-system-unit-file-to-use-foreground.patch
- 1014-mdmon-compensate-for-removal-of-KillMode-none.patch
- 1015-mdmon-improvements-for-switchroot.patch
- 1016-mdopen-always-try-create_named_array.patch
  Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4
  (bsc#1205493, bsc#1205830)</changelog>
</package>
<package pkgid="b3d71868a966f74f3b14f458825d43644cdebce9d9760e69c95c934ce0aa09f2" name="microos-tools" arch="aarch64">
  <version epoch="0" ver="2.18" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1596110400">- Update to version 2.2
  - tmpfs support got moved to systemd</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Update to version 2.3
  - SELinux support [jsc#SMO-15]
  - overwrite tmp.mount options with SELinux label for /tmp
  - Add generator to label mount points if required
  - Add dracut module to relabel core system if required
  - Add locale-check to reset locale to system default if the one
    set by SSH does not exist [bsc#1156175]
  - Set TMPDIR for salt to not use /tmp (preparation for noexec)</changelog>
  <changelog author="kukuk@suse.com" date="1597406400">- Add tmp.mount for SUSE MicroOS 5.0 [jsc#SMO-2]</changelog>
  <changelog author="kukuk@suse.com" date="1597752000">- Don't install tmp.mount.d/selinux.conf on Factory [bsc#1175379]</changelog>
  <changelog author="kukuk@suse.com" date="1597752001">- Update to version 2.4
  - fixes for autorelabel in initrd
  - Use systemds tmpfiles.d/tmp.conf to relabel /tmp and cleanup
    /tmp after 10 days and /var/tmp after 30 days</changelog>
  <changelog author="kukuk@suse.com" date="1601294400">- Update to version 2.5
  - tmp.conf now part of filesystem package for Factory
- Include tmp.conf for SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603281600">- Update to version 2.6
  - Don't delete autorelabel file in initrd</changelog>
  <changelog author="kukuk@suse.com" date="1603368000">- Fix building on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- Update to version 2.7
  - Add workaround if /.autorelabel is used, don't ignore it
- Rename tmp.conf to microos-tmp.conf on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1604923200">- Update to version 2.8
  - Don't propagate umounts into the real root
  - Use content of .autorelabel only if it exists</changelog>
  <changelog author="kukuk@suse.com" date="1605009600">- Update to version 2.9
  - Use absolute path for selinuxenabled in systemd generator</changelog>
  <changelog author="kukuk@suse.com" date="1620648000">- Update to version 2.10
  - Fixes and improvements for SELinux support
  - Add devel tools
- Add new subpackage microos-devel-tools
- Add rpm as build dependency for that subpackage</changelog>
  <changelog author="iforster@suse.com" date="1623844800">- Update to version 2.11
  - Fix unwritable /var / /etc after SELinux relabel [bsc#1186563]</changelog>
  <changelog author="kukuk@suse.com" date="1631188800">- Update to version 2.12
  - Remove special MicroOS firstboot script
  - Remove locale-check, replaced by another aaa_base implementation</changelog>
  <changelog author="kukuk@suse.com" date="1661860800">- Update to version 2.13
  - 98selinux-microos: Don't rely on selinux=1 [bsc#1202449]
  - Add sysext-add-debug
  - Make sure /var/lib/overlay exists before relabeling</changelog>
  <changelog author="kukuk@suse.com" date="1661860801">- Update to version 2.14
  - Fix Makefile to install sysext-add-debug</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to version 2.15
  - 98selinux-microos: Add grep as dependency</changelog>
  <changelog author="fvogt@suse.com" date="1662379200">- Update to version 2.16:
  - 98selinux-microos: Make the btrfs subvolume writable temporarily [boo#1202395]</changelog>
  <changelog author="kukuk@suse.com" date="1663329600">- Update to version 2.17:
  - selinux-autorelabel-generator: Don't cross partition boundaries
  for /.snapshots when relabeling [issue#11]</changelog>
  <changelog author="iforster@suse.com" date="1674129600">- Update to version 2.18:
  - Add TMPDIR to tukit binddirs for Salt
    [bsc#1211356] [bsc#1205011]
  - 98selinux-microos: Add chroot as dependency
  - Fix spelling error in warning</changelog>
</package>
<package pkgid="1ffc6d781ffbb07977894be1db66299a667ed2dbc8ff98d01bd5155f1998c60a" name="microos-tools" arch="s390x">
  <version epoch="0" ver="2.18" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1596110400">- Update to version 2.2
  - tmpfs support got moved to systemd</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Update to version 2.3
  - SELinux support [jsc#SMO-15]
  - overwrite tmp.mount options with SELinux label for /tmp
  - Add generator to label mount points if required
  - Add dracut module to relabel core system if required
  - Add locale-check to reset locale to system default if the one
    set by SSH does not exist [bsc#1156175]
  - Set TMPDIR for salt to not use /tmp (preparation for noexec)</changelog>
  <changelog author="kukuk@suse.com" date="1597406400">- Add tmp.mount for SUSE MicroOS 5.0 [jsc#SMO-2]</changelog>
  <changelog author="kukuk@suse.com" date="1597752000">- Don't install tmp.mount.d/selinux.conf on Factory [bsc#1175379]</changelog>
  <changelog author="kukuk@suse.com" date="1597752001">- Update to version 2.4
  - fixes for autorelabel in initrd
  - Use systemds tmpfiles.d/tmp.conf to relabel /tmp and cleanup
    /tmp after 10 days and /var/tmp after 30 days</changelog>
  <changelog author="kukuk@suse.com" date="1601294400">- Update to version 2.5
  - tmp.conf now part of filesystem package for Factory
- Include tmp.conf for SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603281600">- Update to version 2.6
  - Don't delete autorelabel file in initrd</changelog>
  <changelog author="kukuk@suse.com" date="1603368000">- Fix building on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- Update to version 2.7
  - Add workaround if /.autorelabel is used, don't ignore it
- Rename tmp.conf to microos-tmp.conf on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1604923200">- Update to version 2.8
  - Don't propagate umounts into the real root
  - Use content of .autorelabel only if it exists</changelog>
  <changelog author="kukuk@suse.com" date="1605009600">- Update to version 2.9
  - Use absolute path for selinuxenabled in systemd generator</changelog>
  <changelog author="kukuk@suse.com" date="1620648000">- Update to version 2.10
  - Fixes and improvements for SELinux support
  - Add devel tools
- Add new subpackage microos-devel-tools
- Add rpm as build dependency for that subpackage</changelog>
  <changelog author="iforster@suse.com" date="1623844800">- Update to version 2.11
  - Fix unwritable /var / /etc after SELinux relabel [bsc#1186563]</changelog>
  <changelog author="kukuk@suse.com" date="1631188800">- Update to version 2.12
  - Remove special MicroOS firstboot script
  - Remove locale-check, replaced by another aaa_base implementation</changelog>
  <changelog author="kukuk@suse.com" date="1661860800">- Update to version 2.13
  - 98selinux-microos: Don't rely on selinux=1 [bsc#1202449]
  - Add sysext-add-debug
  - Make sure /var/lib/overlay exists before relabeling</changelog>
  <changelog author="kukuk@suse.com" date="1661860801">- Update to version 2.14
  - Fix Makefile to install sysext-add-debug</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to version 2.15
  - 98selinux-microos: Add grep as dependency</changelog>
  <changelog author="fvogt@suse.com" date="1662379200">- Update to version 2.16:
  - 98selinux-microos: Make the btrfs subvolume writable temporarily [boo#1202395]</changelog>
  <changelog author="kukuk@suse.com" date="1663329600">- Update to version 2.17:
  - selinux-autorelabel-generator: Don't cross partition boundaries
  for /.snapshots when relabeling [issue#11]</changelog>
  <changelog author="iforster@suse.com" date="1674129600">- Update to version 2.18:
  - Add TMPDIR to tukit binddirs for Salt
    [bsc#1211356] [bsc#1205011]
  - 98selinux-microos: Add chroot as dependency
  - Fix spelling error in warning</changelog>
</package>
<package pkgid="5d90dbfb48b46a67e9692188bd1fca9dce8c1d6ee3f5489a7950d6969cd96592" name="microos-tools" arch="src">
  <version epoch="0" ver="2.18" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1596110400">- Update to version 2.2
  - tmpfs support got moved to systemd</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Update to version 2.3
  - SELinux support [jsc#SMO-15]
  - overwrite tmp.mount options with SELinux label for /tmp
  - Add generator to label mount points if required
  - Add dracut module to relabel core system if required
  - Add locale-check to reset locale to system default if the one
    set by SSH does not exist [bsc#1156175]
  - Set TMPDIR for salt to not use /tmp (preparation for noexec)</changelog>
  <changelog author="kukuk@suse.com" date="1597406400">- Add tmp.mount for SUSE MicroOS 5.0 [jsc#SMO-2]</changelog>
  <changelog author="kukuk@suse.com" date="1597752000">- Don't install tmp.mount.d/selinux.conf on Factory [bsc#1175379]</changelog>
  <changelog author="kukuk@suse.com" date="1597752001">- Update to version 2.4
  - fixes for autorelabel in initrd
  - Use systemds tmpfiles.d/tmp.conf to relabel /tmp and cleanup
    /tmp after 10 days and /var/tmp after 30 days</changelog>
  <changelog author="kukuk@suse.com" date="1601294400">- Update to version 2.5
  - tmp.conf now part of filesystem package for Factory
- Include tmp.conf for SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603281600">- Update to version 2.6
  - Don't delete autorelabel file in initrd</changelog>
  <changelog author="kukuk@suse.com" date="1603368000">- Fix building on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- Update to version 2.7
  - Add workaround if /.autorelabel is used, don't ignore it
- Rename tmp.conf to microos-tmp.conf on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1604923200">- Update to version 2.8
  - Don't propagate umounts into the real root
  - Use content of .autorelabel only if it exists</changelog>
  <changelog author="kukuk@suse.com" date="1605009600">- Update to version 2.9
  - Use absolute path for selinuxenabled in systemd generator</changelog>
  <changelog author="kukuk@suse.com" date="1620648000">- Update to version 2.10
  - Fixes and improvements for SELinux support
  - Add devel tools
- Add new subpackage microos-devel-tools
- Add rpm as build dependency for that subpackage</changelog>
  <changelog author="iforster@suse.com" date="1623844800">- Update to version 2.11
  - Fix unwritable /var / /etc after SELinux relabel [bsc#1186563]</changelog>
  <changelog author="kukuk@suse.com" date="1631188800">- Update to version 2.12
  - Remove special MicroOS firstboot script
  - Remove locale-check, replaced by another aaa_base implementation</changelog>
  <changelog author="kukuk@suse.com" date="1661860800">- Update to version 2.13
  - 98selinux-microos: Don't rely on selinux=1 [bsc#1202449]
  - Add sysext-add-debug
  - Make sure /var/lib/overlay exists before relabeling</changelog>
  <changelog author="kukuk@suse.com" date="1661860801">- Update to version 2.14
  - Fix Makefile to install sysext-add-debug</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to version 2.15
  - 98selinux-microos: Add grep as dependency</changelog>
  <changelog author="fvogt@suse.com" date="1662379200">- Update to version 2.16:
  - 98selinux-microos: Make the btrfs subvolume writable temporarily [boo#1202395]</changelog>
  <changelog author="kukuk@suse.com" date="1663329600">- Update to version 2.17:
  - selinux-autorelabel-generator: Don't cross partition boundaries
  for /.snapshots when relabeling [issue#11]</changelog>
  <changelog author="iforster@suse.com" date="1674129600">- Update to version 2.18:
  - Add TMPDIR to tukit binddirs for Salt
    [bsc#1211356] [bsc#1205011]
  - 98selinux-microos: Add chroot as dependency
  - Fix spelling error in warning</changelog>
</package>
<package pkgid="8b86456246270909d9bb4a4336bc34224bc3a18915d4f01b6064045407b36e64" name="microos-tools" arch="x86_64">
  <version epoch="0" ver="2.18" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1596110400">- Update to version 2.2
  - tmpfs support got moved to systemd</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Update to version 2.3
  - SELinux support [jsc#SMO-15]
  - overwrite tmp.mount options with SELinux label for /tmp
  - Add generator to label mount points if required
  - Add dracut module to relabel core system if required
  - Add locale-check to reset locale to system default if the one
    set by SSH does not exist [bsc#1156175]
  - Set TMPDIR for salt to not use /tmp (preparation for noexec)</changelog>
  <changelog author="kukuk@suse.com" date="1597406400">- Add tmp.mount for SUSE MicroOS 5.0 [jsc#SMO-2]</changelog>
  <changelog author="kukuk@suse.com" date="1597752000">- Don't install tmp.mount.d/selinux.conf on Factory [bsc#1175379]</changelog>
  <changelog author="kukuk@suse.com" date="1597752001">- Update to version 2.4
  - fixes for autorelabel in initrd
  - Use systemds tmpfiles.d/tmp.conf to relabel /tmp and cleanup
    /tmp after 10 days and /var/tmp after 30 days</changelog>
  <changelog author="kukuk@suse.com" date="1601294400">- Update to version 2.5
  - tmp.conf now part of filesystem package for Factory
- Include tmp.conf for SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603281600">- Update to version 2.6
  - Don't delete autorelabel file in initrd</changelog>
  <changelog author="kukuk@suse.com" date="1603368000">- Fix building on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- Update to version 2.7
  - Add workaround if /.autorelabel is used, don't ignore it
- Rename tmp.conf to microos-tmp.conf on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1604923200">- Update to version 2.8
  - Don't propagate umounts into the real root
  - Use content of .autorelabel only if it exists</changelog>
  <changelog author="kukuk@suse.com" date="1605009600">- Update to version 2.9
  - Use absolute path for selinuxenabled in systemd generator</changelog>
  <changelog author="kukuk@suse.com" date="1620648000">- Update to version 2.10
  - Fixes and improvements for SELinux support
  - Add devel tools
- Add new subpackage microos-devel-tools
- Add rpm as build dependency for that subpackage</changelog>
  <changelog author="iforster@suse.com" date="1623844800">- Update to version 2.11
  - Fix unwritable /var / /etc after SELinux relabel [bsc#1186563]</changelog>
  <changelog author="kukuk@suse.com" date="1631188800">- Update to version 2.12
  - Remove special MicroOS firstboot script
  - Remove locale-check, replaced by another aaa_base implementation</changelog>
  <changelog author="kukuk@suse.com" date="1661860800">- Update to version 2.13
  - 98selinux-microos: Don't rely on selinux=1 [bsc#1202449]
  - Add sysext-add-debug
  - Make sure /var/lib/overlay exists before relabeling</changelog>
  <changelog author="kukuk@suse.com" date="1661860801">- Update to version 2.14
  - Fix Makefile to install sysext-add-debug</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to version 2.15
  - 98selinux-microos: Add grep as dependency</changelog>
  <changelog author="fvogt@suse.com" date="1662379200">- Update to version 2.16:
  - 98selinux-microos: Make the btrfs subvolume writable temporarily [boo#1202395]</changelog>
  <changelog author="kukuk@suse.com" date="1663329600">- Update to version 2.17:
  - selinux-autorelabel-generator: Don't cross partition boundaries
  for /.snapshots when relabeling [issue#11]</changelog>
  <changelog author="iforster@suse.com" date="1674129600">- Update to version 2.18:
  - Add TMPDIR to tukit binddirs for Salt
    [bsc#1211356] [bsc#1205011]
  - 98selinux-microos: Add chroot as dependency
  - Fix spelling error in warning</changelog>
</package>
<package pkgid="13542595f7922af404038d034ad8b7cde642567116d608264c804c0c46cd9286" name="mozilla-nspr" arch="aarch64">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="ffde6e65d8feb789a1ad1de0153ed225c52e19b7e8ccef62d3ed6fdc17d46433" name="mozilla-nspr" arch="s390x">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="ebfe6d217845da5a0d7581e8cdf0d35d1cacbe9be5bf383a83d22daf1b55a145" name="mozilla-nspr" arch="src">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="58e440af88f3f4da36d0a33dd1dea7265987c39c3e58042c7a1f3c169dc8d0a2" name="mozilla-nspr" arch="x86_64">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="61fa408f793ea332e664ed21a5f3d30ea4d3b142d96533a39018a40da32830ae" name="mozilla-nss" arch="aarch64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="b7927ab62c6bfad4e885a682b80fd4f4611251fa41ae185b606e348f1b48650a" name="mozilla-nss" arch="s390x">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="b6b635b3100f0e11838494b9135a6f827794d955d2fa2b3b9a7a53dcbd0739af" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="0b0a311b196dc62faaba036ea60f8f7e0c7b404db4bced7265657f9533bf8fc2" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="0d5611acfd748a92502fdfe4eb8bfa00c7a6ec330bc7699848c08f9d7cfece1c" name="mozilla-nss" arch="aarch64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="fd0c13b9588dda9f9470324a9d42759d79f50d76285e579fccfc6e8ce0f67393" name="mozilla-nss" arch="s390x">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="78253f8564e3904b1999de96c0caed4d610653d72d9ed68096de47aec279f9a3" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="d96d04abd13ccf0570ca6b582f7b788d9d913914e8efb76a67886183832b3660" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="75cce37a548ea3c6b51aac4e78e289e685f4f01c3ccc0ba86bdeb34fed8c906a" name="mozilla-nss-certs" arch="aarch64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="c45426a81a6f52aa4d6a5f591aa7d21ae8b1d88853332ab1efdaf8263a290d91" name="mozilla-nss-certs" arch="s390x">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="a5244a4812d6f305758997a7ce6d41cdf698376ce9f9fa9391b87c7db7d69e7e" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="1fe02edb683516090ec8c2c1534e544ca49bf9dac72b2039614e87f6c713bca2" name="mozilla-nss-certs" arch="aarch64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="61e4b8f57eec176d1ecdb736f05b4a126563ab14d8e8bc48f1b34e84c909031e" name="mozilla-nss-certs" arch="s390x">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="8434fd25dac8c0b976887cef7619e5a4dbf80d1029c4b0f053416a84c49729da" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="a6f7ea1d183556377b5ca44e12347b10d2c64e2e40428ea170efa4b0e91dd6d8" name="mozilla-nss-tools" arch="aarch64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="0de91fe29a914706ba6eb3024db6122142b272c4991f84d556c771db52424d75" name="mozilla-nss-tools" arch="s390x">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="0a0a476baf7b749215a0a5e2244ca32b43a8c93745a85cddf588ae4571f8f54c" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="88f1345dabfd181677b44e80b5fc6095dba2ededbf1ffe3643426b6c730c3e7a" name="mozilla-nss-tools" arch="aarch64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="c7dbd0b404ccae90914582a7ee7ea9312d0a13bc5acb64b2f5f0880cbfbd2d82" name="mozilla-nss-tools" arch="s390x">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="a72bbec99c38805bae8a5030c843046e4e246252440491395a791ba7e4ea5de4" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="15781542e009a9ca8ef40328b4bb609fbf8511739bb9e7d7d7355750d379b7d1" name="ncurses" arch="src">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="c8f6e299eb17a75f625fc0a2680f2006575a4683490f2fe5332baa30d51f62fa" name="ncurses-utils" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="21d78bcafb5c66fb553ff0f336be2c7ac8188129cffa9b783c1150f2fd2f9e55" name="ncurses-utils" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="d5ce2843054257a6f1bd70e258e85ec571b1d7c43c00c30497c3be0d086b67f8" name="ncurses-utils" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="db7a342f8caf3ecb9bffa3d8bb7977662f74f2731ab329075c3408bb26078cf4" name="ndctl" arch="src">
  <version epoch="0" ver="71.1" rel="150400.10.3.1"/>
  <changelog author="msuchanek@suse.com" date="1565956800">- ndctl/list: Introduce region capability objects (bsc#1145772 ltc#178159).
  + ndctl-list-Introduce-region-capability-objects.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1566216000">- ndctl: Use the same align value as original namespace on reconfigure (bsc#1145577 ltc#178224).
  + ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
- ndctl/lib: Fix duplicate bus detection (bsc#1145573 ltc#180249).
  + ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1566216001">- ndctl/namespace: Handle 'create-namespace' in label-less mode (bsc#1145471 ltc#179886).
  + ndctl-namespace-Handle-create-namespace-in-label-less-mode.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1566388800">- Refresh patches with upstream status:
  ndctl_check_Ensure_mmap_of_BTT_sections_work_with_64K_page-sizes.patch
  ndctl-namespace-Handle-create-namespace-in-label-less-mode.patch
  ndctl-list-Introduce-region-capability-objects.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1571400000">- Refresh patches with upstream status:
  ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
  ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1573214400">- ndctl/dimm: Fix init-labels success reporting (bsc#1156308 ltc#181441).
  + ndctl-dimm-Fix-init-labels-success-reporting.patch
- Refresh patches with upstream status:
  ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
  ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1583236800">- ndctl/test: Relax dax_pmem_compat requirement (bsc#1159523)
  + ndctl-test-Relax-dax_pmem_compat-requirement.patch
- Add -fcommon flag on Tumbleweed (boo#1160286).
- Fix 'ndctl enable-namespace all' fails trying to enable idle namespaces
  (bsc#1165509 ltc#182068).
  + ndctl-namespace-Fix-enable-namespace-error-for-seed-.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1585915200">- ndctl/namespace: Skip zero namespaces when processing all namespaces
  (bsc#1167861, bsc#1165509, ltc#182068).
  + ndctl-namespace-skip-zero-namespaces-when-processing.patch
- Refresh patch to upstream version:
  ndctl-test-Relax-dax_pmem_compat-requirement.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1589544000">- Update to v68:
  * zero-labels: display an error if regions are active
  * destroy-namespace: fix seed namespace accounting
  * list: drop named list objects from verbose listing
  * *-namespace: emit better errors on failure
  * read-infoblock: new command to read an infoblock
  * write-infoblock: new command to create and write an infoblock
  * create-namespace: add --continue option
  * daxctl-reconfigure-device: add --no-movable option
  * daxctl-reconfigure-device: display movable state in listings
  * daxctl-reconfigure-device: detect races in memory onlining
  * security: support for 'security frozen' attribute
  * daxctl-reconfigure-device: new command for device mode management
  * daxctl-{on,off}line-memory: new commands for devices in system-ram mode
  * monitor: logging improvements, allow sending to background
  * inject-error: refuse to operate on activew BTT namespaces
  * *-labels: improvements to minimize data transfer
  * create-namespace: usability improvements around region search
- Removed ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
- Removed ndctl-dimm-Fix-init-labels-success-reporting.patch
- Removed ndctl-list-Introduce-region-capability-objects.patch
- Removed ndctl-namespace-Fix-enable-namespace-error-for-seed-.patch
- Removed ndctl-namespace-Handle-create-namespace-in-label-less-mode.patch
- Removed ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch
- Removed ndctl-test-Relax-dax_pmem_compat-requirement.patch
- Removed ndctl_check_Ensure_mmap_of_BTT_sections_work_with_64K_page-sizes.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1594728000">- Clarify documentation about filtering options (bsc#1173861)
  + ndctl-Documentation-use-includes-in-more-ndctl-command-pag.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1597060800">- Update to v69 (jsc#SLE-13824, jsc#SLE-12770, jsc#SLE-15065, jsc#SLE-15484,
    jsc#SLE-15485, bsc#1175052, ltc#186863, bsc#1174969, ltc#185845):
  * infoblock: Set the default alignment to the platform alignment
  * libndctl/papr_scm: Add support for reporting "life_used_percentage" metric
  * Skip region filtering if numa_node attribute is not present
  * libndctl,papr_scm: Implement support for PAPR_PDSM_HEALTH
  * miscellaneous bugfixes
- Removed ndctl-Documentation-use-includes-in-more-ndctl-command-pag.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1598616000">- Suppress ENXIO when processing all namespaces (jsc#SLE-13321, bsc#1175851, ltc#187867).
  + ndctl-namespace-Suppress-ENXIO-when-processing-all-n.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1603281600">- Update to upstream v70.1 (jsc#SLE-13338).
  Adds firmware activation support.</changelog>
  <changelog author="msuchanek@suse.de" date="1609416000">- Update to upstream v71 (jsc#SLE-14344, bsc#1170384).
  - support for the new device-dax subdivision functionality added in Linux in
    v5.10, including ways to create smaller devdax devices using
    daxctl/libdaxctl, as well as creating, listing, and restoring from a config
    dump, 'mappings' on these devices.
  - miscellaneous bugfixes
- Fix documentation and license packaging</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 71.1:
  * ndctl/dimm: Attempt an abort upon firmware-update-busy status
  * ndctl/dimm: Fix submit_abort_firmware()</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1611316800">- Enable aarch64 build (bsc#1188502).</changelog>
  <changelog author="jsegitz@suse.com" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_ndctl-monitor.service.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf file to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="msuchanek@suse.com" date="1646654400">- Add support for reporting dirty shutdown count (jsc#SLE-18196).
  + 0016-libndctl-papr-Add-support-for-reporting-shutdown-cou.patch
  + 0009-libndctl-papr-Fix-probe-for-papr-scm-compatible-nvdi.patch
  + 0003-libndctl-Unify-adding-dimms-for-papr-and-nfit-famili.patch
- Merge fixes that went into v72 and v73
  - Documentation updates
    + 0015-ndctl-docs-Clarify-update-firwmware-activation-overf.patch
    + 0014-Documentation-ndctl-fix-self-reference-of-ndctl-disa.patch
    + 0013-daxctl-Add-Soft-Reservation-theory-of-operation.patch
    + 0008-ndctl-Update-nvdimm-mailing-list-address.patch
  - Label index block calculation fix
    + 0012-ndctl-dimm-Fix-label-index-block-calculations.patch
    + 0002-Expose-ndctl_bus_nfit_translate_spa-as-a-public-func.patch
  - Scrub fix
    + 0011-ndctl-scrub-Reread-scrub-engine-status-at-start.patch
    + 0010-ndctl-scrub-Stop-translating-return-values.patch
  - Add memblock count to JSON
    + 0007-daxctl-emit-counts-of-total-and-online-memblocks.patch
  - DAX disable fix
    + 0006-libndctl-check-for-active-system-ram-before-disablin.patch
    + 0005-libdaxctl-add-an-API-to-check-if-a-device-is-active.patch
    + 0001-ndctl-namespace-Fix-disable-namespace-accounting-rel.patch
  - DAX reconfigure fix
    + 0004-daxctl-fail-reconfigure-device-based-on-kernel-onlin.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1677067200">- Fix parsing NDCTL_TIMEOUT (bsc#1208548 ltc#199892)
    + ndctl-Fix-the-NDCTL_TIMEOUT-environment-variable-par.patch</changelog>
</package>
<package pkgid="983a122e69a197188d940082cf352458b0c76069c835eaf1001ca94aea8661dc" name="nfs-client" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="150100.10.32.1"/>
  <changelog author="schwab@suse.de" date="1499256000">- nsm-headers.patch: add missing &lt;stdint.h&gt;</changelog>
  <changelog author="nfbrown@suse.com" date="1507291200">- fix incorrect dependency in
  /usr/lib/systemd/system/nfs-client.target.d/nfs.conf
  When yast restarts "nfs" it should propagate to nfs-client,
  but doesn't.
  (boo#1053691)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
</package>
<package pkgid="e9939356bfc094d7cb2ec9febe071f1c097c854a569a44bbd55115e04bd6525d" name="nfs-client" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="150100.10.32.1"/>
  <changelog author="schwab@suse.de" date="1499256000">- nsm-headers.patch: add missing &lt;stdint.h&gt;</changelog>
  <changelog author="nfbrown@suse.com" date="1507291200">- fix incorrect dependency in
  /usr/lib/systemd/system/nfs-client.target.d/nfs.conf
  When yast restarts "nfs" it should propagate to nfs-client,
  but doesn't.
  (boo#1053691)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
</package>
<package pkgid="94d5dcdb75cdc948553ca85fdc2a218027dbc6d26513ab68e7c0ea01578f1424" name="nfs-client" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="150100.10.32.1"/>
  <changelog author="schwab@suse.de" date="1499256000">- nsm-headers.patch: add missing &lt;stdint.h&gt;</changelog>
  <changelog author="nfbrown@suse.com" date="1507291200">- fix incorrect dependency in
  /usr/lib/systemd/system/nfs-client.target.d/nfs.conf
  When yast restarts "nfs" it should propagate to nfs-client,
  but doesn't.
  (boo#1053691)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
</package>
<package pkgid="98ca2fa9549984ab58992b09512d0bda5ebbfbf4247608d86154de908a654f03" name="nfs-kernel-server" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="150100.10.32.1"/>
  <changelog author="schwab@suse.de" date="1499256000">- nsm-headers.patch: add missing &lt;stdint.h&gt;</changelog>
  <changelog author="nfbrown@suse.com" date="1507291200">- fix incorrect dependency in
  /usr/lib/systemd/system/nfs-client.target.d/nfs.conf
  When yast restarts "nfs" it should propagate to nfs-client,
  but doesn't.
  (boo#1053691)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
</package>
<package pkgid="c398fdb76640c7d8fdf0f1d8b16f812906cb759b9af9d405dde7e3c2e94e6a36" name="nfs-kernel-server" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="150100.10.32.1"/>
  <changelog author="schwab@suse.de" date="1499256000">- nsm-headers.patch: add missing &lt;stdint.h&gt;</changelog>
  <changelog author="nfbrown@suse.com" date="1507291200">- fix incorrect dependency in
  /usr/lib/systemd/system/nfs-client.target.d/nfs.conf
  When yast restarts "nfs" it should propagate to nfs-client,
  but doesn't.
  (boo#1053691)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
</package>
<package pkgid="6c3b46977ab103014c0fe595b5bcca3b9f07e8b62eda4609f03cd4d48fb2c2d6" name="nfs-kernel-server" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="150100.10.32.1"/>
  <changelog author="schwab@suse.de" date="1499256000">- nsm-headers.patch: add missing &lt;stdint.h&gt;</changelog>
  <changelog author="nfbrown@suse.com" date="1507291200">- fix incorrect dependency in
  /usr/lib/systemd/system/nfs-client.target.d/nfs.conf
  When yast restarts "nfs" it should propagate to nfs-client,
  but doesn't.
  (boo#1053691)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
</package>
<package pkgid="cf7fc428c35f30e7e3f81b6a72c244a6d92f55815b1fc2dd84c4bac0f2521264" name="nfs-utils" arch="src">
  <version epoch="0" ver="2.1.1" rel="150100.10.32.1"/>
  <changelog author="schwab@suse.de" date="1499256000">- nsm-headers.patch: add missing &lt;stdint.h&gt;</changelog>
  <changelog author="nfbrown@suse.com" date="1507291200">- fix incorrect dependency in
  /usr/lib/systemd/system/nfs-client.target.d/nfs.conf
  When yast restarts "nfs" it should propagate to nfs-client,
  but doesn't.
  (boo#1053691)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
</package>
<package pkgid="36944b35f953f17b5f17cdaa2f2370e5fbea829df8cc7f6f6ea73ba950c41378" name="nftables" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="4c9b362e3d420e08cbdc3751c97b5dd14ee4736d0e33c38c4c477f0381d38970" name="nftables" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="7ddbb4e20619772dab50ab5190e636abecaa762e3831c9e2db44e4dccc8ad5ad" name="nftables" arch="src">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="1c4e5c8552405583709b83ae5889a579baeffb989138c913bb73187d7e7add87" name="nftables" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="fe2af4a33a295e252c88fe2bb611a5c459d1eabd7e8573a75cdb328ec6dfe4fa" name="nvme-cli" arch="aarch64">
  <version epoch="0" ver="2.0+40.gd857ed9befd6" rel="150400.3.18.1"/>
  <changelog author="dimstar@opensuse.org" date="1639051200">- Update to version 1.16:
  + Print ProductName found even if subvendor/subdevice is unknown.
  + Add New fields on PEL based on NVMe 2.0a.
  + nvme-cli:
  - Split media units written/read into hi/lo 64 bit fields.
  - Add support for new SN650 device.
  - Update WDC pluging version to 1.15.3.
  - fix the [data|mdata]_len param (boo#1193547).
  - Add support for C3/Latency Monitor Log page parsing.
  - ctrl-loss-tmo should accept -1 as value.
  + nvme: add spinup control feature (fid=0x1A).
  + nvme: Add Identify for CNS 08h NVMe spec 2.0a based.
  + nvme: add boot partition log support.
  + nvme: add support for fid supported and effects log(lid =
    0x12).
  + add identify endurance group list (cns 0x19) support.
  + add json support for zns report zones.
  + fabrics: fix 'nvme discover' segfault if sysfs path is not
    available.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- fix 'persistent' handling during connect-all with JSON file (bsc#1205657)
  * add 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
  * remove 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * remove 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * remove 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
  * remove 0019-nvme-Add-show-topology-command.patch
  * remove 0020-doc-Add-nvme-show-topology-documnetation.patch
  * remove 0021-completions-Add-show-topology-tab-completion.patch
  * remove 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch
  * remove 0100-harden_nvmf-connect@.service.patch
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
- Build documentation to be up to date
- Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
- Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
- Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
- Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix crash when printing json output for supported log pages (bsc#1209550)
  * nvme-print: fix segfault in supported-log-pages json output
- Add coverity reported fixes (bsc#1209669)
  * nvme: fix nvme get-feature with -H option
  * nvme: add '--groups' option to nvme ana-log
  * nvme: coverity fixes
  * nvme-rpmb: fixup resource leaks
  * nvme-models: fixup resource leaks
  * util/argconfig: fixup possible overflows
- Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
- Fix compiler warning (git-fixes)
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
- Fix condition in autoconnect service (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="5c111102f7508b11978aa78310a5da43b5dde1905456b8823d5fad0686374d4e" name="nvme-cli" arch="s390x">
  <version epoch="0" ver="2.0+40.gd857ed9befd6" rel="150400.3.18.1"/>
  <changelog author="dimstar@opensuse.org" date="1639051200">- Update to version 1.16:
  + Print ProductName found even if subvendor/subdevice is unknown.
  + Add New fields on PEL based on NVMe 2.0a.
  + nvme-cli:
  - Split media units written/read into hi/lo 64 bit fields.
  - Add support for new SN650 device.
  - Update WDC pluging version to 1.15.3.
  - fix the [data|mdata]_len param (boo#1193547).
  - Add support for C3/Latency Monitor Log page parsing.
  - ctrl-loss-tmo should accept -1 as value.
  + nvme: add spinup control feature (fid=0x1A).
  + nvme: Add Identify for CNS 08h NVMe spec 2.0a based.
  + nvme: add boot partition log support.
  + nvme: add support for fid supported and effects log(lid =
    0x12).
  + add identify endurance group list (cns 0x19) support.
  + add json support for zns report zones.
  + fabrics: fix 'nvme discover' segfault if sysfs path is not
    available.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- fix 'persistent' handling during connect-all with JSON file (bsc#1205657)
  * add 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
  * remove 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * remove 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * remove 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
  * remove 0019-nvme-Add-show-topology-command.patch
  * remove 0020-doc-Add-nvme-show-topology-documnetation.patch
  * remove 0021-completions-Add-show-topology-tab-completion.patch
  * remove 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch
  * remove 0100-harden_nvmf-connect@.service.patch
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
- Build documentation to be up to date
- Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
- Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
- Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
- Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix crash when printing json output for supported log pages (bsc#1209550)
  * nvme-print: fix segfault in supported-log-pages json output
- Add coverity reported fixes (bsc#1209669)
  * nvme: fix nvme get-feature with -H option
  * nvme: add '--groups' option to nvme ana-log
  * nvme: coverity fixes
  * nvme-rpmb: fixup resource leaks
  * nvme-models: fixup resource leaks
  * util/argconfig: fixup possible overflows
- Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
- Fix compiler warning (git-fixes)
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
- Fix condition in autoconnect service (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="0e053087efbc536e96a464377a830b6ec606bf9792bc1ba4c59a6582c420c10a" name="nvme-cli" arch="src">
  <version epoch="0" ver="2.0+40.gd857ed9befd6" rel="150400.3.18.1"/>
  <changelog author="dimstar@opensuse.org" date="1639051200">- Update to version 1.16:
  + Print ProductName found even if subvendor/subdevice is unknown.
  + Add New fields on PEL based on NVMe 2.0a.
  + nvme-cli:
  - Split media units written/read into hi/lo 64 bit fields.
  - Add support for new SN650 device.
  - Update WDC pluging version to 1.15.3.
  - fix the [data|mdata]_len param (boo#1193547).
  - Add support for C3/Latency Monitor Log page parsing.
  - ctrl-loss-tmo should accept -1 as value.
  + nvme: add spinup control feature (fid=0x1A).
  + nvme: Add Identify for CNS 08h NVMe spec 2.0a based.
  + nvme: add boot partition log support.
  + nvme: add support for fid supported and effects log(lid =
    0x12).
  + add identify endurance group list (cns 0x19) support.
  + add json support for zns report zones.
  + fabrics: fix 'nvme discover' segfault if sysfs path is not
    available.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- fix 'persistent' handling during connect-all with JSON file (bsc#1205657)
  * add 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
  * remove 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * remove 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * remove 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
  * remove 0019-nvme-Add-show-topology-command.patch
  * remove 0020-doc-Add-nvme-show-topology-documnetation.patch
  * remove 0021-completions-Add-show-topology-tab-completion.patch
  * remove 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch
  * remove 0100-harden_nvmf-connect@.service.patch
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
- Build documentation to be up to date
- Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
- Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
- Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
- Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix crash when printing json output for supported log pages (bsc#1209550)
  * nvme-print: fix segfault in supported-log-pages json output
- Add coverity reported fixes (bsc#1209669)
  * nvme: fix nvme get-feature with -H option
  * nvme: add '--groups' option to nvme ana-log
  * nvme: coverity fixes
  * nvme-rpmb: fixup resource leaks
  * nvme-models: fixup resource leaks
  * util/argconfig: fixup possible overflows
- Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
- Fix compiler warning (git-fixes)
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
- Fix condition in autoconnect service (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="f0971d5606332a7e660833187cb61bbd08673f9f0a7cdbe562c8c2038507b3d9" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="2.0+40.gd857ed9befd6" rel="150400.3.18.1"/>
  <changelog author="dimstar@opensuse.org" date="1639051200">- Update to version 1.16:
  + Print ProductName found even if subvendor/subdevice is unknown.
  + Add New fields on PEL based on NVMe 2.0a.
  + nvme-cli:
  - Split media units written/read into hi/lo 64 bit fields.
  - Add support for new SN650 device.
  - Update WDC pluging version to 1.15.3.
  - fix the [data|mdata]_len param (boo#1193547).
  - Add support for C3/Latency Monitor Log page parsing.
  - ctrl-loss-tmo should accept -1 as value.
  + nvme: add spinup control feature (fid=0x1A).
  + nvme: Add Identify for CNS 08h NVMe spec 2.0a based.
  + nvme: add boot partition log support.
  + nvme: add support for fid supported and effects log(lid =
    0x12).
  + add identify endurance group list (cns 0x19) support.
  + add json support for zns report zones.
  + fabrics: fix 'nvme discover' segfault if sysfs path is not
    available.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- fix 'persistent' handling during connect-all with JSON file (bsc#1205657)
  * add 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
  * remove 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * remove 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * remove 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
  * remove 0019-nvme-Add-show-topology-command.patch
  * remove 0020-doc-Add-nvme-show-topology-documnetation.patch
  * remove 0021-completions-Add-show-topology-tab-completion.patch
  * remove 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch
  * remove 0100-harden_nvmf-connect@.service.patch
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
- Build documentation to be up to date
- Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
- Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
- Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
- Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix crash when printing json output for supported log pages (bsc#1209550)
  * nvme-print: fix segfault in supported-log-pages json output
- Add coverity reported fixes (bsc#1209669)
  * nvme: fix nvme get-feature with -H option
  * nvme: add '--groups' option to nvme ana-log
  * nvme: coverity fixes
  * nvme-rpmb: fixup resource leaks
  * nvme-models: fixup resource leaks
  * util/argconfig: fixup possible overflows
- Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
- Fix compiler warning (git-fixes)
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
- Fix condition in autoconnect service (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="4de43dd8e4509c3eb2257ea0f7613d29714f2c503ae0933a4b7d949c5c5043ba" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.2.0" rel="150300.26.1"/>
  <changelog author="kallan@suse.com" date="1598616000">- Update to 11.1.5 (build 16724464) (boo#1175573)
  + This source release rolls up the SDMP fixes release post 11.1.0.
  + Fix serveral Coverity reported issues.
  + Address github issues:
    https://github.com/vmware/open-vm-tools/issues/451
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/issues/428
- Drop unnecessary patch:
  - gcc10-warning.patch
  - sdmp-get-version.patch
  - sdmp-netstat-to-ss.patch
  - sdmp-warnings.patch</changelog>
  <changelog author="schwab@suse.de" date="1599480000">- Use libtirpc also in SLE-15-SP3</changelog>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
</package>
<package pkgid="27a6829a330cc6cf99954548cbb8799a2875c6e7377ce824a16a865cf49cd7cf" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.2.0" rel="150300.26.1"/>
  <changelog author="kallan@suse.com" date="1598616000">- Update to 11.1.5 (build 16724464) (boo#1175573)
  + This source release rolls up the SDMP fixes release post 11.1.0.
  + Fix serveral Coverity reported issues.
  + Address github issues:
    https://github.com/vmware/open-vm-tools/issues/451
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/issues/428
- Drop unnecessary patch:
  - gcc10-warning.patch
  - sdmp-get-version.patch
  - sdmp-netstat-to-ss.patch
  - sdmp-warnings.patch</changelog>
  <changelog author="schwab@suse.de" date="1599480000">- Use libtirpc also in SLE-15-SP3</changelog>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
</package>
<package pkgid="a3747306348439e978efae5c10bdad0105091465aecd394423572f33a6663a24" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="a2d75bceb12e53a9c33b11d4e758dcd72ec88c9f349b65fc1ae579adbe6228c1" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="9b7b71834503d22076ed5d7bf274a480a8ccd0a4db2da16053757ab8eeabb856" name="openldap2" arch="src">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="4bc1e7ce719cdfc31003b4ceb455270b3e58141c633f1aadce340b7e9dbe3c3f" name="openldap2" arch="src">
  <version epoch="0" ver="2.4.46" rel="150200.14.17.1"/>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
</package>
<package pkgid="3c3e54832a146c16fd5e2604d67966ff82eec46c877b6849fe8de30181598439" name="opensc" arch="aarch64">
  <version epoch="0" ver="0.22.0" rel="150400.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
</package>
<package pkgid="b1744dcd409c300c85eea6a8ce44cb8daf611a7beaa862b88771ae4df11c0cc9" name="opensc" arch="s390x">
  <version epoch="0" ver="0.22.0" rel="150400.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
</package>
<package pkgid="3f0add7bd7aea75b486327bec3b3e201ec24cad0c7d8ee744c13500ef1237c31" name="opensc" arch="src">
  <version epoch="0" ver="0.22.0" rel="150400.3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1294401600">- Updated to version 0.12.0:
  * Security fix (bnc#660109, CVE-2010-4523).
  * Only one backend is supported. openSUSE will use pcsc-lite.
  * libopensc made private, library should not be used by other
    applications. Please use generic PKCS#11 interface instead.
  * Signer plugin discontinued. Please use openssl engine_pkcs11.
  * No more depends on libassuan.
  * New card drivers.
  * Support for CardOS enhanced.
  * More changes and enhancements.
- libopensc merged back to the main package, as it is private now.</changelog>
  <changelog author="lmedinas@opensuse.org" date="1317297600">- Updated to version 0.12.2:
  * Builds are now silent by default when OpenSC is built from
    source on Unix.
  * Using --wait with command line tools works with 64bit Linux
    again.
  * Greatly improved OpenPGP card support, including OpenPGP
    2.0 cards like the one found in German Privacy Foundation
    CryptoStick.
  * Fixed support for FINeID cards issued after 01.03.2011 with
    2048bit keys.
  * #256: Fixed support for TCOS cards (broken since 0.12.0).
  * Added support for IDKey-cards to TCOS3 driver.
  * #361: Improved PC/SC driver to fetch the maximum PIN sizes
    from the open source CCID driver. This fixes the issue for
    Linux/OSX with recent driver.
  * Fix FINeID cards for organizations.
  * Several smaller bugs and compiler warnings fixed
- Updated to version 0.12.1:
  * IAS-ECC 1.0.1
  * Support for cards with multiple PKCS#15 applications
  * New card driver: IAS/ECC 1.0.1
  * rutoken-tool has been deprecated and removed.
  * eidenv and piv-tool utilities now have manual pages.
  * pkcs11-tool now requires the use of --module parameter.
  * All tools can now use an ATR as an argument to --reader,
    to skip to the card with given ATR.
  * opensc-tool -l with -v now shows information about the
    inserted cards.
  * Creating files have an enforced upper size limit, 64K
  * Support for multiple PKCS#15 applications with different
    AID-s. PKCS#15 applications can be listed with pkcs15-tool
  - -list-applications. Binding to a specific AID with PKCS#15
    tools can be done with --aid.
  * Hex strings (like card ATR or APDU-s) can now be separated
    by space, in addition to colons.
  * Pinpad readers known to be bogus are now ignored by OpenSC.
    At the moment only "HP USB Smart Card Keyboard" is disabled.
  * Numerous compiler warnings, unused code and internal bugs
    have been eliminated.</changelog>
  <changelog author="mgorse@suse.com" date="1339502400">- make needed directories before running make install</changelog>
  <changelog author="luizluca@tre-sc.gov.br" date="1386072000">- update to version 0.13.0</changelog>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
</package>
<package pkgid="2869da9911f982948c9b5c4791b7049029655a93ff0598845fb90c1562c81dda" name="opensc" arch="x86_64">
  <version epoch="0" ver="0.22.0" rel="150400.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
</package>
<package pkgid="568997efa5610939e2777975d6ddecadadd4e70c77ed6083a2bac12a8a266d7f" name="openssh" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="6f3ba471eda09e36ec3fc62db18f9e9443698f0977640cf6356096ce473b13b3" name="openssh" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="651cf328af0b1bc574922ae4abc1ba37d83672d6bf07931cb2856f01ebe9c996" name="openssh" arch="src">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="0e2307e610e4b80db01d9646d38a08dd475938c86b3ce0cfd7d42ff2ccb2ea38" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="de6a4cc82d4da8a960d676a5589ff746cb791c5d2baca08d40cddc9e1be52bea" name="openssh-clients" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="54e4df832cadf4def977ebc03f03078e99c17cc1d5705591a7fedd0ada228283" name="openssh-clients" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="deac90859fe91dd2c15e0e41d3d0e0d9053b64cb2f27f034a57d6480882112b1" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="c731b535574fefbd00b2d340ac3456be73b2f3451a96fec0830394bb91790944" name="openssh-common" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="e5c0836ea1405f4fdb6a8fb936d2fec0322c8927c01ee037ee78203fa8f5178d" name="openssh-common" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="b773922f92518f637254580606169e5df546c1c5825ac97529dd7d886f4ec776" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="7738f9612beaebf9bf62cfec95397cf44ad9a5e7bcbb1050bdee2c294546dba4" name="openssh-fips" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="1202c4bf7b52ac526cb054fc8c5a3f35b19eeba179a337eb4cbf406ea5219fe2" name="openssh-fips" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="cfad00fdd506b9461c8ceab99ccfe125dcf28342b136dd864f64bea7f68c2708" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="e0f1d831bb4bdf892cbf11d5df5040e48d0a9f258cfd8ce8e5b1019daf792ff4" name="openssh-server" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="a0be90e184b7befebbca74404031b496afe080eee4a8b89391c19c6fb60c6970" name="openssh-server" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="5cc1206a0c38e9fccbca6967513405538389382b6e8a3d792317fc88eaf4751b" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="2110b892919198d62dcd2bf50fd3e4df77cec253e56326b5a0f49d9b0b7f8740" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="2f38e42d05730451249f3f67f7e46b3f9ecf5d5f894b52e2163e4c5042e20518" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="6cf28459f0ec3907fbca5d76d15b7ae115f5c0aee4b2e7c8b827c35ed55a05ab" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="f91b1a479062be239d15641ec2378c521254fddf81db6889dc4a8d2b59012db4" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="0c9f4f544275848058cffddc91ef0973973feb9d769a35e8496fc7575903a166" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="488651a771cd7f5eb1d7642020135600e2c3c6282801ed92a5efaf692a181fb4" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="a3a2221f241721b92acda8d1d3987b4581e7a74b7638b981713bcd46d53c72d2" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="70faa94b88ba7bf1ac00f734cb554380201205b632dd800ea1529bbf3100e4b0" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="eabc5c5c0f5814b10811f9669144904a661bf5e76efb1c0f6223e8b3bd6acce9" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="60aa5e2d454920d038ca8360967e83bbdea0c53b535000ed2676ad4308b136f0" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="a335b1c2af8002fd5fd7ce71455f60f8a9882ff05203295cdd31147616cc5c74" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="5a17cadc75aa055d02016ec97fe12cb23c361b7e0988a65a4299505157aa7ae7" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="82fe15dede366c83cd088e85d7e9ed80ccb13672f1d94044d076ecac413d03e4" name="openssl-ibmca" arch="s390x">
  <version epoch="0" ver="2.4.0" rel="150400.4.11.1"/>
  <changelog author="mpluskal@suse.com" date="1459944000">- Use macro for configure (fate#319941)
- Use url for source
- Enable parallel building
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1476360000">- fixed ssl configuration merging (bsc#1004463)
- openssl-ibmca-fix-enginepath.patch: fix the engine path</changelog>
  <changelog author="mpost@suse.com" date="1491912000">- Added openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch (bsc#1032113)
- Added libica-tools to the BuildRequires due to repackaging of libica.
- Renamed BuildRequires from libica2-devel to libica-devel for the
  same reason.
- Tweaked a comment to get rid of an rpmlint warning message.</changelog>
  <changelog author="mpost@suse.com" date="1506081600">- Now that the openSSL engines directory is versioned:
  * Modified the spec file to query the libcrypto package
    for which directory to install the engine into.
  * Removed openssl-ibmca-fix-enginepath.patch. Replaced it
    with a sed command so that it will provide the correct
    versioned engines directory
- Removed openssl-ibmca-configure.patch. It doesn't seem to
  be needed any longer.</changelog>
  <changelog author="mpost@suse.com" date="1506081601">- Upgraded to version 1.4.0
  * Re-license to Apache License v2.0
  * Fix aes_gcm initialization.
  * Update man page.
  * Add macros for OpenSSL 0.9.8 compat.
  * Remove AC_FUNC_MALLOC from configure.ac
  * Add compat macro for OpenSSL 1.0.1e-fips.
  * Setting 'foreign' strictness for automake.
  * Add AES-GCM support.
  * Rework EVP_aes macros.
  * Remove dependency of old local OpenSSL headers.
  * Fix engine initialization to set function pointers only once.
  * Remove blank COPYING and NEWS files.
  * Remove INSTALL and move its content to README.md
  * Update README.md file to make use of markdown.
  * Rename README file to README.md to use markdown
  * Add CONTRIBUTING guidelines.
  * Adding coding style documentation.
  * Enable EVP_MD_FLAG_FIPS flag for SHA-*.
  * Initialize rsa_keygen in RSA_METHOD for openssl &lt; 1.1.0
  * Fix SHA512 EVP digest struct to use
    EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0
  * Fix wrong parenthesis
  * convert libica loading to dlopen() and friends
  * Add support to DSO on new API of OpenSSL-1.1.0
- Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch
- Added BuildRequires for autoconf, automake, and libtool.
- Updated BuildRequires for libica-devel to be &gt;= 3.1.1</changelog>
  <changelog author="mpost@suse.com" date="1535716800">- Added the following patches for bsc#1097463
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 2.0.0 (Fate#325688)
  * openssl-ibmca 2.0.0
    Add ECC support.
    Add check and distcheck make-targets.
    Project cleanup, code was broken into multiple files and coding style cleanup.
    Improvements to compat macros for openssl.
    Don't disable libica sw fallbacks.
    Fix dlclose logic.
  * openssl-ibmca 1.4.1
    Fix structure size for aes-256-ecb/cbc/cfb/ofb
    Update man page
    Switch to ibmca.so filename to allow standalone use
    Switch off Libica fallback mode if available
    Make sure ibmca_init only runs once
    Provide simple macro for DEBUG_PRINTF possibility
    Cleanup and slight rework of function set_supported_meths
- Did some cleanup to the spec file, based on spec-cleanup.
- Removed the following obsolete patches:
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 2.0.1 (Fate#325688)
  * openssl-ibmca 2.0.1
    Dont fail when a libica symbol cannot be resolved.
- Made multiple changes to the spec file based on spec-cleaner output.</changelog>
  <changelog author="mpost@suse.com" date="1543320000">- Upgraded to version 2.0.2 (Fate#325688)
  * openssl-ibmca 2.0.2
    Fix doing rsa-me, altough rsa-crt would be possible.</changelog>
  <changelog author="mpost@suse.com" date="1561723200">- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
  An Apache HTTP Server was set up with mod_ssl and the openssl
  ibmca engine using libica and a CEX6A card. Whenever a worker
  process is cleaned up a segmentation fault occurs.
  (bsc#1138517)</changelog>
  <changelog author="mpost@suse.com" date="1566993600">- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424)
  * openssl-ibmca 2.0.3
    Add MSA9 CPACF support for ECDSA sign/verify
- Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
- Changed the ExclusiveArch directive to include s390x only.
- The code in e_ibmca.c does a dlopen for libica.so.3, instead of
  linking against the shared library. As a result, if the package
  containing libica.so.3 isn't installed, problems occur. Added
  a "Requires: libica3" to the spec file to fix this. (bsc#1142286)
- Made a couple of changes to the spec file based on the output
  from spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1568116800">- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882)
  Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448</changelog>
  <changelog author="mpost@suse.com" date="1600257600">- Upgrade to version 2.1.1 (jsc#SLE-13709)
  * Bug fixes</changelog>
  <changelog author="mpost@suse.com" date="1631880000">- Upgraded to version 2.2.1 (jsc#SLE-18333)
  * openssl-ibmca 2.2.1
    Bug fixes
  * openssl-ibmca 2.2.0
    Implement fallbacks based on OpenSSL
    Disable software fallbacks from libica
    Allow to specify default library (libica vs. libica-cex) to use
    Provide "libica" engine ctrl to switch library at load time
    Update README.md
    Remove libica link dependency
    Generate sample configuration files from system configuration
    Restructure registration global data
  * openssl-ibmca 2.1.3
    Bug fix
  * openssl-ibmca 2.1.2
    Bug fixes
- Modified spec file to
  * Define a global variable enginesdir the same was as IBM does
    instead of _ENGINE_DIR as we had been doing.
  * Implemented %make_build macro according to spec-cleaner
  * Changed the package description to match IBM's.
  * Removed the redundant "autoreconf --force --install"</changelog>
  <changelog author="mpost@suse.com" date="1647345600">- Completely revamped the postinstall scriptlet so that it doesn't
  need to know or care about how many lines are in either
  /etc/ssl/openssl.cnf, or the sample file at
  /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
  We're now using the ".include" directive for the openssl.cnf
  file, and only modifying that file the minimum necessary to
  implement the change. (bsc#1004463)</changelog>
  <changelog author="mpost@suse.com" date="1664884800">- Upgraded to version 2.3.1 (jsc#PED-597)
  * openssl-ibmca 2.3.1
  - Adjustments for libica 4.1.0
  * openssl-ibmca 2.3.0
  - First version including the provider
  - Fix for engine build without OpenSSL 3.0 sources
  * openssl-ibmca 2.2.3
  - Fix PKEY segfault with OpenSSL 3.0
  * openssl-ibmca 2.2.2
  - Fix tests with OpenSSL 3.0
  - Build against libica 4.0
- Removed a Requires for libica from the specfile.
- Removed the obsolete baselibs.conf file</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1680696000">- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058)
  * openssl-ibmca 2.4.0
  - Provider: Adjustments for OpenSSL versions 3.1 and 3.2
  - Provider: Support RSA blinding
  - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
  - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
  - Provider: Adjustments in OpenSSL config generator and example configs
  - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Applies a patch (bsc#1210359)
  * openssl-ibmca-engine-noregister.patch
- Updated %autosetup, added ' -p1'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682424000">- Added dependency on libica4 (bsc#1209038)
  * BuildRequires and Requires statements in .spec file for libica4</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682596800">- Updated the .spec file as follow:
  * BuildRequires:  libica-devel &gt;= 4.0.0
  * BuildRequires:  libica-tools &gt;= 4.0.0</changelog>
</package>
<package pkgid="05cbe8db09d3cbf6ea14820d9b2eff3702371e3c75015f524b3e7e7b468f3d4c" name="openssl-ibmca" arch="src">
  <version epoch="0" ver="2.4.0" rel="150400.4.11.1"/>
  <changelog author="mpluskal@suse.com" date="1459944000">- Use macro for configure (fate#319941)
- Use url for source
- Enable parallel building
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1476360000">- fixed ssl configuration merging (bsc#1004463)
- openssl-ibmca-fix-enginepath.patch: fix the engine path</changelog>
  <changelog author="mpost@suse.com" date="1491912000">- Added openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch (bsc#1032113)
- Added libica-tools to the BuildRequires due to repackaging of libica.
- Renamed BuildRequires from libica2-devel to libica-devel for the
  same reason.
- Tweaked a comment to get rid of an rpmlint warning message.</changelog>
  <changelog author="mpost@suse.com" date="1506081600">- Now that the openSSL engines directory is versioned:
  * Modified the spec file to query the libcrypto package
    for which directory to install the engine into.
  * Removed openssl-ibmca-fix-enginepath.patch. Replaced it
    with a sed command so that it will provide the correct
    versioned engines directory
- Removed openssl-ibmca-configure.patch. It doesn't seem to
  be needed any longer.</changelog>
  <changelog author="mpost@suse.com" date="1506081601">- Upgraded to version 1.4.0
  * Re-license to Apache License v2.0
  * Fix aes_gcm initialization.
  * Update man page.
  * Add macros for OpenSSL 0.9.8 compat.
  * Remove AC_FUNC_MALLOC from configure.ac
  * Add compat macro for OpenSSL 1.0.1e-fips.
  * Setting 'foreign' strictness for automake.
  * Add AES-GCM support.
  * Rework EVP_aes macros.
  * Remove dependency of old local OpenSSL headers.
  * Fix engine initialization to set function pointers only once.
  * Remove blank COPYING and NEWS files.
  * Remove INSTALL and move its content to README.md
  * Update README.md file to make use of markdown.
  * Rename README file to README.md to use markdown
  * Add CONTRIBUTING guidelines.
  * Adding coding style documentation.
  * Enable EVP_MD_FLAG_FIPS flag for SHA-*.
  * Initialize rsa_keygen in RSA_METHOD for openssl &lt; 1.1.0
  * Fix SHA512 EVP digest struct to use
    EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0
  * Fix wrong parenthesis
  * convert libica loading to dlopen() and friends
  * Add support to DSO on new API of OpenSSL-1.1.0
- Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch
- Added BuildRequires for autoconf, automake, and libtool.
- Updated BuildRequires for libica-devel to be &gt;= 3.1.1</changelog>
  <changelog author="mpost@suse.com" date="1535716800">- Added the following patches for bsc#1097463
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 2.0.0 (Fate#325688)
  * openssl-ibmca 2.0.0
    Add ECC support.
    Add check and distcheck make-targets.
    Project cleanup, code was broken into multiple files and coding style cleanup.
    Improvements to compat macros for openssl.
    Don't disable libica sw fallbacks.
    Fix dlclose logic.
  * openssl-ibmca 1.4.1
    Fix structure size for aes-256-ecb/cbc/cfb/ofb
    Update man page
    Switch to ibmca.so filename to allow standalone use
    Switch off Libica fallback mode if available
    Make sure ibmca_init only runs once
    Provide simple macro for DEBUG_PRINTF possibility
    Cleanup and slight rework of function set_supported_meths
- Did some cleanup to the spec file, based on spec-cleanup.
- Removed the following obsolete patches:
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 2.0.1 (Fate#325688)
  * openssl-ibmca 2.0.1
    Dont fail when a libica symbol cannot be resolved.
- Made multiple changes to the spec file based on spec-cleaner output.</changelog>
  <changelog author="mpost@suse.com" date="1543320000">- Upgraded to version 2.0.2 (Fate#325688)
  * openssl-ibmca 2.0.2
    Fix doing rsa-me, altough rsa-crt would be possible.</changelog>
  <changelog author="mpost@suse.com" date="1561723200">- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
  An Apache HTTP Server was set up with mod_ssl and the openssl
  ibmca engine using libica and a CEX6A card. Whenever a worker
  process is cleaned up a segmentation fault occurs.
  (bsc#1138517)</changelog>
  <changelog author="mpost@suse.com" date="1566993600">- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424)
  * openssl-ibmca 2.0.3
    Add MSA9 CPACF support for ECDSA sign/verify
- Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
- Changed the ExclusiveArch directive to include s390x only.
- The code in e_ibmca.c does a dlopen for libica.so.3, instead of
  linking against the shared library. As a result, if the package
  containing libica.so.3 isn't installed, problems occur. Added
  a "Requires: libica3" to the spec file to fix this. (bsc#1142286)
- Made a couple of changes to the spec file based on the output
  from spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1568116800">- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882)
  Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448</changelog>
  <changelog author="mpost@suse.com" date="1600257600">- Upgrade to version 2.1.1 (jsc#SLE-13709)
  * Bug fixes</changelog>
  <changelog author="mpost@suse.com" date="1631880000">- Upgraded to version 2.2.1 (jsc#SLE-18333)
  * openssl-ibmca 2.2.1
    Bug fixes
  * openssl-ibmca 2.2.0
    Implement fallbacks based on OpenSSL
    Disable software fallbacks from libica
    Allow to specify default library (libica vs. libica-cex) to use
    Provide "libica" engine ctrl to switch library at load time
    Update README.md
    Remove libica link dependency
    Generate sample configuration files from system configuration
    Restructure registration global data
  * openssl-ibmca 2.1.3
    Bug fix
  * openssl-ibmca 2.1.2
    Bug fixes
- Modified spec file to
  * Define a global variable enginesdir the same was as IBM does
    instead of _ENGINE_DIR as we had been doing.
  * Implemented %make_build macro according to spec-cleaner
  * Changed the package description to match IBM's.
  * Removed the redundant "autoreconf --force --install"</changelog>
  <changelog author="mpost@suse.com" date="1647345600">- Completely revamped the postinstall scriptlet so that it doesn't
  need to know or care about how many lines are in either
  /etc/ssl/openssl.cnf, or the sample file at
  /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
  We're now using the ".include" directive for the openssl.cnf
  file, and only modifying that file the minimum necessary to
  implement the change. (bsc#1004463)</changelog>
  <changelog author="mpost@suse.com" date="1664884800">- Upgraded to version 2.3.1 (jsc#PED-597)
  * openssl-ibmca 2.3.1
  - Adjustments for libica 4.1.0
  * openssl-ibmca 2.3.0
  - First version including the provider
  - Fix for engine build without OpenSSL 3.0 sources
  * openssl-ibmca 2.2.3
  - Fix PKEY segfault with OpenSSL 3.0
  * openssl-ibmca 2.2.2
  - Fix tests with OpenSSL 3.0
  - Build against libica 4.0
- Removed a Requires for libica from the specfile.
- Removed the obsolete baselibs.conf file</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1680696000">- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058)
  * openssl-ibmca 2.4.0
  - Provider: Adjustments for OpenSSL versions 3.1 and 3.2
  - Provider: Support RSA blinding
  - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
  - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
  - Provider: Adjustments in OpenSSL config generator and example configs
  - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Applies a patch (bsc#1210359)
  * openssl-ibmca-engine-noregister.patch
- Updated %autosetup, added ' -p1'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682424000">- Added dependency on libica4 (bsc#1209038)
  * BuildRequires and Requires statements in .spec file for libica4</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682596800">- Updated the .spec file as follow:
  * BuildRequires:  libica-devel &gt;= 4.0.0
  * BuildRequires:  libica-tools &gt;= 4.0.0</changelog>
</package>
<package pkgid="2fe8148d7131faf6305866469fcfdc4c48f7b61dc655c99ef9799c00ec7063c7" name="openssl-ibmca" arch="s390x">
  <version epoch="0" ver="2.4.0" rel="150400.4.8.1"/>
  <changelog author="jjolly@suse.com" date="1458561600">- Fixed %post script to update library path (the only dynamic part
  of the ibmca configuration) every time the package is installed.
  (bsc#966139)</changelog>
  <changelog author="mpost@suse.com" date="1459425600">- Upgraded to version 1.3.0 (fate#319941)
  - Updated openssl-ibmca-configure.patch to apply cleanly
  - Removed obsolete patches
  - openssl-ibmca-README.patch
  - openssl-ibmca-sha256-digest-length.patch
  - openssl-pkey.patch
  - openssl-des-ede.patch
- Did some spec file cleanup.</changelog>
  <changelog author="mpluskal@suse.com" date="1459944000">- Use macro for configure (fate#319941)
- Use url for source
- Enable parallel building
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1476360000">- fixed ssl configuration merging (bsc#1004463)
- openssl-ibmca-fix-enginepath.patch: fix the engine path</changelog>
  <changelog author="mpost@suse.com" date="1491912000">- Added openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch (bsc#1032113)
- Added libica-tools to the BuildRequires due to repackaging of libica.
- Renamed BuildRequires from libica2-devel to libica-devel for the
  same reason.
- Tweaked a comment to get rid of an rpmlint warning message.</changelog>
  <changelog author="mpost@suse.com" date="1506081600">- Now that the openSSL engines directory is versioned:
  * Modified the spec file to query the libcrypto package
    for which directory to install the engine into.
  * Removed openssl-ibmca-fix-enginepath.patch. Replaced it
    with a sed command so that it will provide the correct
    versioned engines directory
- Removed openssl-ibmca-configure.patch. It doesn't seem to
  be needed any longer.</changelog>
  <changelog author="mpost@suse.com" date="1506081601">- Upgraded to version 1.4.0
  * Re-license to Apache License v2.0
  * Fix aes_gcm initialization.
  * Update man page.
  * Add macros for OpenSSL 0.9.8 compat.
  * Remove AC_FUNC_MALLOC from configure.ac
  * Add compat macro for OpenSSL 1.0.1e-fips.
  * Setting 'foreign' strictness for automake.
  * Add AES-GCM support.
  * Rework EVP_aes macros.
  * Remove dependency of old local OpenSSL headers.
  * Fix engine initialization to set function pointers only once.
  * Remove blank COPYING and NEWS files.
  * Remove INSTALL and move its content to README.md
  * Update README.md file to make use of markdown.
  * Rename README file to README.md to use markdown
  * Add CONTRIBUTING guidelines.
  * Adding coding style documentation.
  * Enable EVP_MD_FLAG_FIPS flag for SHA-*.
  * Initialize rsa_keygen in RSA_METHOD for openssl &lt; 1.1.0
  * Fix SHA512 EVP digest struct to use
    EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0
  * Fix wrong parenthesis
  * convert libica loading to dlopen() and friends
  * Add support to DSO on new API of OpenSSL-1.1.0
- Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch
- Added BuildRequires for autoconf, automake, and libtool.
- Updated BuildRequires for libica-devel to be &gt;= 3.1.1</changelog>
  <changelog author="mpost@suse.com" date="1535716800">- Added the following patches for bsc#1097463
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 2.0.0 (Fate#325688)
  * openssl-ibmca 2.0.0
    Add ECC support.
    Add check and distcheck make-targets.
    Project cleanup, code was broken into multiple files and coding style cleanup.
    Improvements to compat macros for openssl.
    Don't disable libica sw fallbacks.
    Fix dlclose logic.
  * openssl-ibmca 1.4.1
    Fix structure size for aes-256-ecb/cbc/cfb/ofb
    Update man page
    Switch to ibmca.so filename to allow standalone use
    Switch off Libica fallback mode if available
    Make sure ibmca_init only runs once
    Provide simple macro for DEBUG_PRINTF possibility
    Cleanup and slight rework of function set_supported_meths
- Did some cleanup to the spec file, based on spec-cleanup.
- Removed the following obsolete patches:
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 2.0.1 (Fate#325688)
  * openssl-ibmca 2.0.1
    Dont fail when a libica symbol cannot be resolved.
- Made multiple changes to the spec file based on spec-cleaner output.</changelog>
  <changelog author="mpost@suse.com" date="1543320000">- Upgraded to version 2.0.2 (Fate#325688)
  * openssl-ibmca 2.0.2
    Fix doing rsa-me, altough rsa-crt would be possible.</changelog>
  <changelog author="mpost@suse.com" date="1561723200">- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
  An Apache HTTP Server was set up with mod_ssl and the openssl
  ibmca engine using libica and a CEX6A card. Whenever a worker
  process is cleaned up a segmentation fault occurs.
  (bsc#1138517)</changelog>
  <changelog author="mpost@suse.com" date="1566993600">- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424)
  * openssl-ibmca 2.0.3
    Add MSA9 CPACF support for ECDSA sign/verify
- Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
- Changed the ExclusiveArch directive to include s390x only.
- The code in e_ibmca.c does a dlopen for libica.so.3, instead of
  linking against the shared library. As a result, if the package
  containing libica.so.3 isn't installed, problems occur. Added
  a "Requires: libica3" to the spec file to fix this. (bsc#1142286)
- Made a couple of changes to the spec file based on the output
  from spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1568116800">- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882)
  Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448</changelog>
  <changelog author="mpost@suse.com" date="1600257600">- Upgrade to version 2.1.1 (jsc#SLE-13709)
  * Bug fixes</changelog>
  <changelog author="mpost@suse.com" date="1631880000">- Upgraded to version 2.2.1 (jsc#SLE-18333)
  * openssl-ibmca 2.2.1
    Bug fixes
  * openssl-ibmca 2.2.0
    Implement fallbacks based on OpenSSL
    Disable software fallbacks from libica
    Allow to specify default library (libica vs. libica-cex) to use
    Provide "libica" engine ctrl to switch library at load time
    Update README.md
    Remove libica link dependency
    Generate sample configuration files from system configuration
    Restructure registration global data
  * openssl-ibmca 2.1.3
    Bug fix
  * openssl-ibmca 2.1.2
    Bug fixes
- Modified spec file to
  * Define a global variable enginesdir the same was as IBM does
    instead of _ENGINE_DIR as we had been doing.
  * Implemented %make_build macro according to spec-cleaner
  * Changed the package description to match IBM's.
  * Removed the redundant "autoreconf --force --install"</changelog>
  <changelog author="mpost@suse.com" date="1647345600">- Completely revamped the postinstall scriptlet so that it doesn't
  need to know or care about how many lines are in either
  /etc/ssl/openssl.cnf, or the sample file at
  /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
  We're now using the ".include" directive for the openssl.cnf
  file, and only modifying that file the minimum necessary to
  implement the change. (bsc#1004463)</changelog>
  <changelog author="mpost@suse.com" date="1664884800">- Upgraded to version 2.3.1 (jsc#PED-597)
  * openssl-ibmca 2.3.1
  - Adjustments for libica 4.1.0
  * openssl-ibmca 2.3.0
  - First version including the provider
  - Fix for engine build without OpenSSL 3.0 sources
  * openssl-ibmca 2.2.3
  - Fix PKEY segfault with OpenSSL 3.0
  * openssl-ibmca 2.2.2
  - Fix tests with OpenSSL 3.0
  - Build against libica 4.0
- Removed a Requires for libica from the specfile.
- Removed the obsolete baselibs.conf file</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1680696000">- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058)
  * openssl-ibmca 2.4.0
  - Provider: Adjustments for OpenSSL versions 3.1 and 3.2
  - Provider: Support RSA blinding
  - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
  - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
  - Provider: Adjustments in OpenSSL config generator and example configs
  - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Applies a patch (bsc#1210359)
  * openssl-ibmca-engine-noregister.patch
- Updated %autosetup, added ' -p1'</changelog>
</package>
<package pkgid="3fdf52ad72175e303b47af7f0d955c8bc9b3e1269025b1d83d9a6734f58cd9b1" name="openssl-ibmca" arch="src">
  <version epoch="0" ver="2.4.0" rel="150400.4.8.1"/>
  <changelog author="jjolly@suse.com" date="1458561600">- Fixed %post script to update library path (the only dynamic part
  of the ibmca configuration) every time the package is installed.
  (bsc#966139)</changelog>
  <changelog author="mpost@suse.com" date="1459425600">- Upgraded to version 1.3.0 (fate#319941)
  - Updated openssl-ibmca-configure.patch to apply cleanly
  - Removed obsolete patches
  - openssl-ibmca-README.patch
  - openssl-ibmca-sha256-digest-length.patch
  - openssl-pkey.patch
  - openssl-des-ede.patch
- Did some spec file cleanup.</changelog>
  <changelog author="mpluskal@suse.com" date="1459944000">- Use macro for configure (fate#319941)
- Use url for source
- Enable parallel building
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1476360000">- fixed ssl configuration merging (bsc#1004463)
- openssl-ibmca-fix-enginepath.patch: fix the engine path</changelog>
  <changelog author="mpost@suse.com" date="1491912000">- Added openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch (bsc#1032113)
- Added libica-tools to the BuildRequires due to repackaging of libica.
- Renamed BuildRequires from libica2-devel to libica-devel for the
  same reason.
- Tweaked a comment to get rid of an rpmlint warning message.</changelog>
  <changelog author="mpost@suse.com" date="1506081600">- Now that the openSSL engines directory is versioned:
  * Modified the spec file to query the libcrypto package
    for which directory to install the engine into.
  * Removed openssl-ibmca-fix-enginepath.patch. Replaced it
    with a sed command so that it will provide the correct
    versioned engines directory
- Removed openssl-ibmca-configure.patch. It doesn't seem to
  be needed any longer.</changelog>
  <changelog author="mpost@suse.com" date="1506081601">- Upgraded to version 1.4.0
  * Re-license to Apache License v2.0
  * Fix aes_gcm initialization.
  * Update man page.
  * Add macros for OpenSSL 0.9.8 compat.
  * Remove AC_FUNC_MALLOC from configure.ac
  * Add compat macro for OpenSSL 1.0.1e-fips.
  * Setting 'foreign' strictness for automake.
  * Add AES-GCM support.
  * Rework EVP_aes macros.
  * Remove dependency of old local OpenSSL headers.
  * Fix engine initialization to set function pointers only once.
  * Remove blank COPYING and NEWS files.
  * Remove INSTALL and move its content to README.md
  * Update README.md file to make use of markdown.
  * Rename README file to README.md to use markdown
  * Add CONTRIBUTING guidelines.
  * Adding coding style documentation.
  * Enable EVP_MD_FLAG_FIPS flag for SHA-*.
  * Initialize rsa_keygen in RSA_METHOD for openssl &lt; 1.1.0
  * Fix SHA512 EVP digest struct to use
    EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0
  * Fix wrong parenthesis
  * convert libica loading to dlopen() and friends
  * Add support to DSO on new API of OpenSSL-1.1.0
- Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch
- Added BuildRequires for autoconf, automake, and libtool.
- Updated BuildRequires for libica-devel to be &gt;= 3.1.1</changelog>
  <changelog author="mpost@suse.com" date="1535716800">- Added the following patches for bsc#1097463
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 2.0.0 (Fate#325688)
  * openssl-ibmca 2.0.0
    Add ECC support.
    Add check and distcheck make-targets.
    Project cleanup, code was broken into multiple files and coding style cleanup.
    Improvements to compat macros for openssl.
    Don't disable libica sw fallbacks.
    Fix dlclose logic.
  * openssl-ibmca 1.4.1
    Fix structure size for aes-256-ecb/cbc/cfb/ofb
    Update man page
    Switch to ibmca.so filename to allow standalone use
    Switch off Libica fallback mode if available
    Make sure ibmca_init only runs once
    Provide simple macro for DEBUG_PRINTF possibility
    Cleanup and slight rework of function set_supported_meths
- Did some cleanup to the spec file, based on spec-cleanup.
- Removed the following obsolete patches:
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 2.0.1 (Fate#325688)
  * openssl-ibmca 2.0.1
    Dont fail when a libica symbol cannot be resolved.
- Made multiple changes to the spec file based on spec-cleaner output.</changelog>
  <changelog author="mpost@suse.com" date="1543320000">- Upgraded to version 2.0.2 (Fate#325688)
  * openssl-ibmca 2.0.2
    Fix doing rsa-me, altough rsa-crt would be possible.</changelog>
  <changelog author="mpost@suse.com" date="1561723200">- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
  An Apache HTTP Server was set up with mod_ssl and the openssl
  ibmca engine using libica and a CEX6A card. Whenever a worker
  process is cleaned up a segmentation fault occurs.
  (bsc#1138517)</changelog>
  <changelog author="mpost@suse.com" date="1566993600">- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424)
  * openssl-ibmca 2.0.3
    Add MSA9 CPACF support for ECDSA sign/verify
- Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
- Changed the ExclusiveArch directive to include s390x only.
- The code in e_ibmca.c does a dlopen for libica.so.3, instead of
  linking against the shared library. As a result, if the package
  containing libica.so.3 isn't installed, problems occur. Added
  a "Requires: libica3" to the spec file to fix this. (bsc#1142286)
- Made a couple of changes to the spec file based on the output
  from spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1568116800">- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882)
  Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448</changelog>
  <changelog author="mpost@suse.com" date="1600257600">- Upgrade to version 2.1.1 (jsc#SLE-13709)
  * Bug fixes</changelog>
  <changelog author="mpost@suse.com" date="1631880000">- Upgraded to version 2.2.1 (jsc#SLE-18333)
  * openssl-ibmca 2.2.1
    Bug fixes
  * openssl-ibmca 2.2.0
    Implement fallbacks based on OpenSSL
    Disable software fallbacks from libica
    Allow to specify default library (libica vs. libica-cex) to use
    Provide "libica" engine ctrl to switch library at load time
    Update README.md
    Remove libica link dependency
    Generate sample configuration files from system configuration
    Restructure registration global data
  * openssl-ibmca 2.1.3
    Bug fix
  * openssl-ibmca 2.1.2
    Bug fixes
- Modified spec file to
  * Define a global variable enginesdir the same was as IBM does
    instead of _ENGINE_DIR as we had been doing.
  * Implemented %make_build macro according to spec-cleaner
  * Changed the package description to match IBM's.
  * Removed the redundant "autoreconf --force --install"</changelog>
  <changelog author="mpost@suse.com" date="1647345600">- Completely revamped the postinstall scriptlet so that it doesn't
  need to know or care about how many lines are in either
  /etc/ssl/openssl.cnf, or the sample file at
  /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
  We're now using the ".include" directive for the openssl.cnf
  file, and only modifying that file the minimum necessary to
  implement the change. (bsc#1004463)</changelog>
  <changelog author="mpost@suse.com" date="1664884800">- Upgraded to version 2.3.1 (jsc#PED-597)
  * openssl-ibmca 2.3.1
  - Adjustments for libica 4.1.0
  * openssl-ibmca 2.3.0
  - First version including the provider
  - Fix for engine build without OpenSSL 3.0 sources
  * openssl-ibmca 2.2.3
  - Fix PKEY segfault with OpenSSL 3.0
  * openssl-ibmca 2.2.2
  - Fix tests with OpenSSL 3.0
  - Build against libica 4.0
- Removed a Requires for libica from the specfile.
- Removed the obsolete baselibs.conf file</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1680696000">- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058)
  * openssl-ibmca 2.4.0
  - Provider: Adjustments for OpenSSL versions 3.1 and 3.2
  - Provider: Support RSA blinding
  - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
  - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
  - Provider: Adjustments in OpenSSL config generator and example configs
  - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Applies a patch (bsc#1210359)
  * openssl-ibmca-engine-noregister.patch
- Updated %autosetup, added ' -p1'</changelog>
</package>
<package pkgid="6774ee4bb998085e1fc2c65c0ef6b3b2b86f09ef52770c7a158d1d1c1cd31144" name="ovmf" arch="src">
  <version epoch="0" ver="202202" rel="150400.5.10.1"/>
  <changelog author="glin@suse.com" date="1625832000">- Add ovmf-fix-xen-s3-detection.patch to fix the S3 detection in
  ovmf-xen
- Add ovmf-xen-add-qemu-kernel-loader-fs.patch to add
  QemuKernelLoaderFsDxe to ovmf-xen to load kernel from qemu fw_cfg</changelog>
  <changelog author="jlee@suse.com" date="1634212800">- Update to edk2-stable202108
  - Features (https://github.com/tianocore/edk2/releases):
  OvmfPkg: remove Xen support from OvmfPkg*.dsc, in favor of OvmfXen.dsc
  Add CLANGDWARF toolchain for generating ELF+DWARF
  NetworkPkg/IScsiDxe: remotely exploitable buffer overflows
  NetworkPkg/IScsiDxe: add sha256 support to CHAP
  Create header files and multiple Hobs for Universal Payload
  Add search feature in config editor
  Add additional build option to treat Dynamic Pcd as DynamicEx Pcd
  Add a new MicrocodeLib for microcode loading
  Implement key enrolment from default key variables
  StandaloneMm support for 32bit Arm machines
  Add firmware support for Cloud Hypervisor on arm64
  Support architecture-specific openssl acceleration
  Support measured AMD SEV boot with kernel/initrd/cmdline
  Add ACPI 6.4 header
  Add new BootDiscoveryPolicyUiLib
  - Patches (git log --oneline --reverse edk2-stable202105~..edk2-stable202108):
  e1999b264f ArmPkg/ArmGic: Fix maximum number of interrupts in GICv3
  b8ed8c0fb2 Maintainers.txt: add Sami Mujawar as top-level ArmVirtPkg reviewer
  dbc22a1785 UefiCpuPkg/MpInitLib: Allocate a separate SEV-ES AP reset stack area
  0095070e70 MdePkg/Register/Amd: expand the SEV MSR to include the SNP definition
  f828fc9876 MdePkg/Register/Amd: realign macros with more space for future expansion
  34e16ff883 MdePkg/Register/Amd: define GHCB macros for hypervisor feature detection
  f0983b2074 MdePkg/Register/Amd: define GHCB macro for Register GPA structure
  4665fa6503 MdePkg/Register/Amd: define GHCB macro for the Page State Change
  dfd41aef78 MdePkg/Register/Amd: define GHCB macros for SNP AP creation
  5a7cbd54a1 MdePkg/BaseLib: add support for PVALIDATE instruction
  2b5b2ff04d MdePkg/BaseLib: add support for RMPADJUST instruction
  901a9bfc3a OvmfPkg/BaseMemEncryptSevLib: introduce MemEncryptSevClearMmioPageEncMask()
  c394fa4c9e OvmfPkg/AmdSevDxe: use MemEncryptSevClearMmioPageEncMask() to clear EncMask
  8ee4e52ba8 OvmfPkg/QemuFlashFvbServicesRuntimeDxe: use Mmio helper to clear enc mask
  b4a8de5d27 OvmfPkg/TpmMmioSevDecryptPei: use MemEncryptSevClearMmioPageEncMask()
  adfa3327d4 OvmfPkg/BaseMemEncryptSevLib: remove Flush parameter
  fe5da0927a IntelFsp2WrapperPkg: Remove microcode related PCDs
  d3ff5dbe1d MdePkg: MmControl: Fix function and structure definition mismatches
  197e27c90a MdePkg: Add new 16550-compatible Serial Port Subtypes to DBG2
  fdf3666f01 MdePkg: Update DBG2 and SPCR header with NVIDIA 16550 Subtype
  b233eb1849 EmbeddedPkg/RealTimeClockRuntimeDxe: Improve GetWakeupTime
  b5379899b3 MdeModulePkg/Xhci: Fix TRT when data length is 0
  039e07f626 MdePkg/MdeModulePkg: Move AML_NAME_SEG_SIZE definition
  1f515342d8 DynamicTablesPkg: Use AML_NAME_SEG_SIZE define
  75e9154f81 OvmfPkg/VirtioMmioDeviceLib: Add EFIAPI to VirtioMmioSetQueueAddress
  c410ad4da4 MdePkg/BaseLib: Fix AsmReadSs() with GCC toolchain
  c1aa3bab12 BaseTools: Add ClangBase.lds for CLANG8 tool chain with max-page-size
  c6b872c6ab BaseTools GenFw: Support CLANG8ELF with conversion ELF to PE/COFF image
  cf9959adff BaseTools: Update build_rule to skip CLANG resource section generation
  4b56ad2049 BaseTools: Add new CLANG8ELF tool chain for new LLVM/CLANG8
  e1636fe18f BaseTools: Update ClangBase.lds to keep dynamic section
  924c2b847f BaseTools: Change CLANG8ELF to CLANGDWARF
  e25566cd2b OvmfPkg: remove the Xen drivers from the IA32, IA32X64, and X64 platforms
  aa7f19f480 OvmfPkg: remove the Xen drivers from the AmdSev platform
  7bc04a75a7 OvmfPkg: switch IA32, IA32X64, X64 to the fw_cfg-only ACPI platform driver
  d697037446 OvmfPkg: switch the AmdSev platform to the fw_cfg-only ACPI platform driver
  ae4aa4a346 OvmfPkg/README: bump minimum QEMU version to 1.7.1, machine types to 1.7
  2a85d9b07e OvmfPkg/AcpiPlatformDxe: fix header file warts
  180f1908b3 OvmfPkg/AcpiPlatformDxe: sort #includes and [LibraryClasses]
  6d1e56e715 OvmfPkg/AcpiPlatformDxe/QemuLoader.h: remove QemuFwCfgLib class dependency
  747b1ef725 OvmfPkg/AcpiPlatformDxe: move "QemuLoader.h" to IndustryStandard
  cc302b799e OvmfPkg/AcpiPlatformDxe: consolidate #includes and [LibraryClasses]
  c9bba52fc7 OvmfPkg/XenAcpiPlatformDxe: create from AcpiPlatformDxe
  a31fcb5096 OvmfPkg/AcpiPlatformDxe: remove the "AcpiPlatformDxe.inf" driver
  4115840c28 OvmfPkg/XenAcpiPlatformDxe: remove the QEMU ACPI linker/loader client
  d6ba8aa6ef OvmfPkg/XenAcpiPlatformDxe: remove QEMU fw_cfg dependency
  3f975ee570 OvmfPkg/XenAcpiPlatformDxe: remove the InstallAcpiTable() helper function
  8f8d3d90c5 OvmfPkg/XenAcpiPlatformDxe: remove OVMF's built-in ACPI tables
  4174c5c787 OvmfPkg/Bhyve/AcpiPlatformDxe: fix file path typo in comment
  d491c88a0c OvmfPkg/AcpiTables: remove unused module
  e7641171b6 OvmfPkg/OvmfXen: make "PcdPciDisableBusEnumeration" Fixed-at-Build
  3357ac7380 OvmfPkg/XenAcpiPlatformDxe: remove delayed ACPI table installation
  d06eb2d1d9 OvmfPkg/PlatformPei: remove Xen support
  8899e3fe6a OvmfPkg: drop PcdPciDisableBusEnumeration from the IA32, IA32X64, X64 DSCs
  2833589ad0 OvmfPkg: drop PcdPciDisableBusEnumeration from the AmdSev platform
  e43cca74ad OvmfPkg/Bhyve: make "PcdPciDisableBusEnumeration" Fixed-at-Build
  b005f9f1f5 OvmfPkg/OvmfXen: remove IncompatiblePciDeviceSupport DXE driver
  8c8f886f27 OvmfPkg/Bhyve: remove IncompatiblePciDeviceSupport DXE driver
  984c93ece3 OvmfPkg/IncompatiblePciDeviceSupportDxe: remove PcdPciDisableBusEnumeration
  32fef03563 OvmfPkg/PciHostBridgeLib: consolidate #includes and INF file sections
  e120c962f5 OvmfPkg/PciHostBridgeLibScan: create from PciHostBridgeLib
  c2f24ba321 OvmfPkg/Bhyve: consume PciHostBridgeLibScan
  307763c3da OvmfPkg/OvmfXen: consume PciHostBridgeLibScan
  242678da2a OvmfPkg/PciHostBridgeLib: remove Bhyve and Xen support
  33d4f3e39e OvmfPkg/PciHostBridgeLibScan: remove QEMU (fw_cfg) support
  4c81178cf0 OvmfPkg/PciHostBridgeLibScan: remove PcdOvmfHostBridgePciDevId
  8af38170b5 OvmfPkg/PciHostBridgeLibScan: clean up file names and file-top comments
  7e25086a00 OvmfPkg/SmbiosPlatformDxe: clean up #includes and INF
  5072593738 OvmfPkg/SmbiosPlatformDxe: return EFI_NOT_FOUND if there is no SMBIOS data
  4db374562f OvmfPkg/SmbiosPlatformDxe: locate SMBIOS protocol in InstallAllStructures()
  a8ab14424e OvmfPkg/SmbiosPlatformDxe: split GetXenSmbiosTables() decl. to new header
  9d84e74ca0 OvmfPkg/SmbiosPlatformDxe: declare InstallAllStructures() in header file
  d4a8aaee73 OvmfPkg/SmbiosPlatformDxe: create Xen-specific module INF file
  ce270905bf OvmfPkg/SmbiosPlatformDxe: split Xen entry point from QEMU entry point
  51adb689e1 OvmfPkg: restrict XenPlatformLib to BdsDxe in the IA32, IA32X64, X64 DSCs
  ddb3fdbef3 BaseTools GenFw: Fix regression issue to convert the image to ACPI data
  558d83ab1a OvmfPkg/README: Fix typo in README
  beb443fde0 ShellPkg: Fix typo
  702ba436ed OvmfPkg/PlatformCI: bump QEMU choco package version to 2021.5.5
  83761337ec NetworkPkg/IScsiDxe: wrap IScsiCHAP source files to 80 characters
  29cab43bb7 NetworkPkg/IScsiDxe: simplify "ISCSI_CHAP_AUTH_DATA.InChallenge" size
  95616b8661 NetworkPkg/IScsiDxe: clean up "ISCSI_CHAP_AUTH_DATA.OutChallengeLength"
  e8f28b09e6 NetworkPkg/IScsiDxe: clean up library class dependencies
  cf01b2dc8f NetworkPkg/IScsiDxe: fix potential integer overflow in IScsiBinToHex()
  d90fff40cb NetworkPkg/IScsiDxe: assert that IScsiBinToHex() always succeeds
  dc469f1371 NetworkPkg/IScsiDxe: reformat IScsiHexToBin() leading comment block
  47b76780b4 NetworkPkg/IScsiDxe: fix IScsiHexToBin() hex parsing
  54e90edaed NetworkPkg/IScsiDxe: fix IScsiHexToBin() buffer overflow
  b8649cf2a3 NetworkPkg/IScsiDxe: check IScsiHexToBin() return values
  288bd74a22 Pytool: SpellCheck: Fix incorrect file mask across package matrices
  1ad794b627 MdeModulePkg: Fix device path when boot manager menu is from different FV
  11b1c1d4b9 SecurityPkg: TcgStorageOpalLib: Initialize SupportedAttributes parameter.
  d58016b768 UefiPayloadPkg: Get platform specific logic via protocol for BDS
  d8c18ba3f4 MdeModulePkg: Add Universal Payload general definition header file
  b597b6e24c MdeModulePkg: Add new structure for the PCI Root Bridge Info Hob
  99de2e7e03 UefiPayloadPkg: UefiPayload retrieve PCI root bridge from Guid Hob
  9d53e01efe MdeModulePkg: Add new structure for the Universal Payload SMBios Table Hob
  70e8c9c3bc MdeModulePkg/Universal/SmbiosDxe: Scan for existing tables
  302a8f353c UefiPayloadPkg: Create gUniversalPayloadSmbiosTableGuid Hob
  75293330ea MdeModulePkg: Add new structure for the Universal Payload ACPI Table Hob
  761329ee27 MdeModulePkg/ACPI: Install ACPI table from HOB.
  8c0d678063 UefiPayloadPkg: Create gUniversalPayloadAcpiTableGuid Hob
  fa24b6ed26 UefiPayloadPkg: Use DynamicEx instead of Dynamic to pass PCD across binary
  c511426abe MdeModulePkg/UniversalPayload: Add definition for extra info in payload
  fe471d4a57 UefiPayloadPkg: Add PayloadLoaderPeim which can load ELF payload
  ab2b389e7a PeiCore: Remove assertion when failing to load PE image
  1b380aa603 BaseTools GenFw: Keep read only alloc section as text when convert ELF
  9cf9de668f StandaloneMmPkg: Core: Spelling error in comment
  610385fa3b ArmPlatformPkg: SpellCheck: Switch spellcheck CI to AuditOnly
  04ddd1271e ArmPkg: SpellCheck: Update valid acronyms in ExtendedWords
  cdf7544703 MdeModulePkg PciBusDxe: Increase the width of data read during oprom shadow
  2847c72fda Maintainers.txt: Add Reviewers for Universal Payload definitions
  1162ae8297 Maintainers.txt: Add reviewers for ACPI and SMBIOS modules
  a63914d3f6 ArmPkg: Move cache defs used in Universal/Smbios into ArmCache.h
  6cfeeb71c4 UefiCpuPkg/CpuCommonFeaturesLib: Correct the CPU location check
  d9a7612f8d MdeModulePkg/BdsDxe: Update BdsEntry to use Variable Policy
  5959879e92 ArmVirtPkg: Add PCIe host bridge utility lib for ArmVirtPkg
  4dda0f7ab4 ArmVirtPkg: Enable PCIe support for Kvmtool
  1e5e58d39b UefiPayloadPkg/UefiPayloadEntry: Improve bootloader memrange parsing
  7471751a4d UefiPayloadPkg/UefiPayloadEntry: Remove 4GB memory WA
  20ca528828 CryptoPkg: BaseCryptLib: Update Salt length requirement for RSA-PSS scheme.
  18b2272e4d Azurepipeline: SpellCheck: Enforce Node dependency to use version 14.x
  eba32695ee CryptoPkg/BaseCryptLib: Enabled CryptSha512 for Smm/Runtime drivers
  12e34cd2f7 OvmfPkg/Bhyve: clean up TPM_ENABLE remnants
  82f727c4af UefiPayloadPkg: Add HobLib for UniversalPayload
  ea0bd5f6a7 MdeModulePkg: Add new structure for the Universal Payload Serial Port Info
  a75c029f60 UefiPayloadPkg: Add a separate PlatformHookLib for Universal Payload
  d63595c3c9 UefiPayloadPkg: Update the function definition of HobConstructor
  0ff6de9358 UefiPayloadPkg: Create separate Payload Entry for UniversalPayload
  b208d37c73 UefiPayloadPkg: Get and enter DxeCore for Universal Payload
  27cb64fffc UefiPayloadPkg: Fix up UPL Pcd database
  6b69f73b59 UefiPayloadPkg: Include UniversalPayLoad modules in UefiPayloadPkg.dsc
  86e6948cfb UefiPayloadPkg: Remove assert when reserve MMIO/IO resource for devices
  2db0ed93ff UefiPayloadPkg: Add macro to enable and disable some drivers
  3eb72b308a UefiPayloadPkg: Add PcdInstallAcpiSdtProtocol feature in UefiPayloadPkg
  caa139fe17 UefiPayloadPkg: Add PcdResetOnMemoryTypeInformationChange in UefiPayloadPkg
  8efd912baf UefiPayloadPkg: Add new structure for BootManagerMenuFile HOB
  19a541d70e UefiPayloadPkg: consume the BootManagerMenuFile HOB
  333a866106 BaseTools: Remove check for Split.exe in toolset.bat
  f0a3f6d9c3 BaseTools: Fix spelling of "overwrite" and "overwriting" in toolset.bat
  17143c4837 BaseTools: Reset ERRORLEVEL in toolsetup.bat after edk2basetools check
  abfff7c45d BaseTools GenFw: Add support for RISCV GOT/PLT relocations
  27b8a52957 MdePkg: MmConfiguration: Move definition of EFI_MM_RESERVED_MMRAM_REGION
  d1fc3d7ef3 MdePkg: MmConfiguration: Added definition of MM Configuration PPI
  5a2e030f73 OvmfPkg/GenericQemuLoadImageLib: plug cmdline blob leak on success
  932449710c OvmfPkg/X86QemuLoadImageLib: plug cmdline blob leak on success
  24b0e9d128 Revert "OvmfPkg/QemuKernelLoaderFsDxe: don't expose kernel command line"
  cf20302474 OvmfPkg/GenericQemuLoadImageLib: Read cmdline from QemuKernelLoaderFs
  9421f5ab8d OvmfPkg/X86QemuLoadImageLib: State fw_cfg dependency in file header
  b37cfdd280 OvmfPkg/XenPlatformPei: Relocate shared_info page mapping
  55dee4947b MdePkg : Add IPMI Macro and Structure Defintions to resolve build errors
  580b11201e IntelFsp2Pkg: Add Config Editor tool support
  939ed3a592 UefiPayloadPkg/PayloadLoader: Fix bug in locating relocation section
  3cde0d553d UefiPayloadPkg/PayloadLoader: Remove assertion
  49eeda113a NetworkPkg/IScsiDxe: re-set session-level authentication state before login
  7eba9f698e NetworkPkg/IScsiDxe: add horizontal whitespace to IScsiCHAP files
  7b6c2b2a26 NetworkPkg/IScsiDxe: distinguish "maximum" and "selected" CHAP digest sizes
  903ce1d8f8 NetworkPkg/IScsiDxe: support multiple hash algorithms for CHAP
  47fea2abcb NetworkPkg/IScsiDxe: support SHA256 in CHAP
  bb33c27fbe NetworkPkg: introduce the NETWORK_ISCSI_MD5_ENABLE feature test macro
  8697dc60cc Maintainers.txt: Update Maintainers and reviewers for UefiPayloadPkg
  fea7901dba UefiPayloadPkg: Fix the build failure
  1e0c441c92 OvmfPkg/Bhyve: add USB support
  44ced03798 OvmfPkg/Bhyve: use static PCI32Base address
  b3db0cb1f8 MdeModulePkg/PartitionDxe: Ignore PMBR BootIndicator per UEFI spec
  0a6b303dce UefiCpuPkg/ExceptionLib: Conditionally clear shadow stack token busy bit
  d10e058016 MdeModulePkg/RegularExpressionDxe: Fix memory assert in FreePool()
  4c051c2c65 MdeModulePkg: Update YAML file to fix CI error
  31fcee6d99 ArmVirtPkg: Add PlatformHasAcpiDtDxe for Cloud Hypervisor
  c28fc8ab3b ArmVirtPkg: Install Acpi tables for Cloud Hypervisor
  0e3b6bd0ee ArmVirtPkg: support Cloud Hypervisor in edk2
  b560e9d9b6 IntelFsp2Pkg: PatchFv parseInfFile function modification
  f47c4676dd Pytool: SpellCheck: Defer path expansion in cspell parameters
  cc89d245f9 Maintainers.txt: remove Laszlo Ersek's entries
  84af6ea320 BaseTools/Scripts: Ignore Mergify merge commits in PatchCheck.py
  b491eace37 .mergify: Simplify Mergify rules using GitHub status checks
  5ef08a49e3 .azurepipelines: Remove FINISHED and FAILED states
  ad1009ec62 MdePkg/Include: Add STATIC_ASSERT for L'' and L"" strings
  3de3c24755 BaseTools: Remove non-ascii character of StructurePcd comment
  40a9066439 BaseTools: Enable the flag to treat dynamic pcd as dynamicEx
  22fe311bd2 .pytool/EccCheck: Locate BaseTools dir with EDK_TOOLS_PATH
  a050c599df .pytool/EccCheck: Rename edk2_path as workspace_path
  50672d2692 .pytool/EccCheck: Check ecc_csv exists
  fb5b6220a9 .pytool/EccCheck: Set PACKAGES_PATH env var in Ecc
  fda5226aa3 UefiPayloadPkg: Dump hob information from boot loader
  7d748705b1 MdeModulePkg: Change the PldHeader to Header in ExtraData.h
  9bf4aee734 UefiPayloadPkg: Assign the length of UniversalPayload ExtraData
  d0b6596b8e MdeModulePkg/RamDiskDxe: Init list head before registering RamDisk protocol
  91f5d3b410 IntelFsp2Pkg: BaseCacheLib EfiProgramMtrr MtrrNumber Should be UINT32
  be282b1493 UefiPayloadPkg: Add PCD_DYNAMIC_AS_DYNAMICEX and set to True
  cac83b6f3b IntelFsp2Pkg: Add search function for Config Editor
  4bac086e8e UefiPayloadPkg: Add FV Guid for DXEFV and PLDFV
  fddb8d24ec ArmPlatformPkg/Scripts: Infer dll load address from console output
  885efcd3f9 MdePkg/Include: Smbios Specification 3.4.0 changes
  83b43c4cb1 MdeModulePkg PCD: Print which PCD was unable to be found
  c32c5911c4 BaseTools GenFw: Add support for R_RISCV_PCREL_LO12_S relocation
  097aeeb119 MdePkg/BaseLib: Add MemoryFence implementation for RiscV64
  391cffcb61 MdeModulePkg PiSmmCore: Change MemoryAttributes message to DEBUG_VERBOSE
  8781b143de BaseTools/Scripts: Fix GetMaintainer.py line endings
  28ef05ce10 BaseTools/Scripts: Allow GitHub ID at end Maintainers.txt lines
  2f5ad3f451 Maintainers.txt: Add GitHub IDs
  332632abf3 Maintainers.txt: Add Jiewen Yao as OvmfPkg Maintainer
  4d28a1c2fd BaseTools: Remove COMMON section from the GCC discard list
  878a92a887 CryptoPkg/OpensslLib: Add native instruction support for X64
  147f34b56c CryptoPkg/OpensslLib: Commit the auto-generated assembly files for X64
  ac70e71b1f NetworkPkg: Making the HTTP IO timeout value programmable with PCD
  ab796d3e2a NetworkPkg: Add HTTP Additional Event Notifications
  b461d67639 OvmfPkg/ResetVector: move SEV specific code in a separate file
  7f05102f65 OvmfPkg/ResetVector: add the macro to invoke MSR protocol based VMGEXIT
  dc485c556d OvmfPkg/ResetVector: add the macro to request guest termination
  f05eb2dfe5 OvmfPkg/AmdSev/SecretDxe: fix header comment to generic naming
  35e267cb34 OvmfPkg/AmdSev: use GenericQemuLoadImageLib in AmdSev builds
  a26a08dc1f OvmfPkg: PlatformBootManagerLibGrub: Allow executing kernel via fw_cfg
  0cb48007f7 OvmfPkg: add library class BlobVerifierLib with null implementation
  c73e31f54d OvmfPkg: add BlobVerifierLibNull to DSC
  6bf5580a3d ArmVirtPkg: add BlobVerifierLibNull to DSC
  d10ad8444f OvmfPkg/QemuKernelLoaderFsDxe: call VerifyBlob after fetch from fw_cfg
  5ace477f34 OvmfPkg/AmdSev/SecretPei: build hob for full page
  0deeab36d1 OvmfPkg/AmdSev: reserve MEMFD space for for firmware config hashes
  385b9d80a0 OvmfPkg/AmdSev: add BlobVerifierLibSevHashes
  514b3aa08e OvmfPkg/AmdSev: Enforce hash verification of kernel blobs
  8e6bb64fe4 EmbeddedPkg/VirtualRealTimeClockLib: Fix SetTime issues
  610bcc69ed ArmVirtPkg: Remove meaningless comment
  3445058aea MdeModulePkg/CapsuleApp: Fix typo in error message
  2e1fb41339 build: Fix python3.10 threading DeprecationWarnings
  0b1b0a9674 python: Replace distutils.utils.split_quotes with shlex.split
  fc50df0d8e BaseTools: Drop check for distutils.utils
  03e77558d4 BaseTools: use shutil.copyfile instead shutil.copy2
  2b47aaecef MdeModulePkg: Add BootDiscoveryPolicyUiLib.
  bb806a6e88 SecurityPkg: Create SecureBootVariableLib.
  9732659698 SecurityPkg: Create library for enrolling Secure Boot variables.
  12a4d0cb9d ArmVirtPkg: add SecureBootVariableLib class resolution
  3d427c5f83 OvmfPkg: add SecureBootVariableLib class resolution
  b926956418 EmulatorPkg: add SecureBootVariableLib class resolution
  db959018b6 SecurityPkg: Remove duplicated functions from SecureBootConfigDxe.
  a97e9e327e ArmPlatformPkg: Create include file for default key content.
  94e065582b SecurityPkg: Add SecureBootDefaultKeysDxe driver
  19107590b6 SecurityPkg: Add EnrollFromDefaultKeys application.
  45f3dd2ce9 SecurityPkg: Add new modules to Security package.
  55266a9b8a SecurityPkg: Add option to reset secure boot keys.
  6355287206 Maintainers.txt: Add new maintainer and reviewer to EmbeddedPkg/
  9abc60f9f7 EmbeddedPkg/libfdt: Add strcmp and strncpy to libfdt_env.h
  0856cdc89e MdePkg: add definition of LINUX_EFI_INITRD_MEDIA_GUID
  97fdcbda4e OvmfPkg: Remove Initrd LINUX_EFI_INITRD_MEDIA_GUID
  4de77ae989 UefiCpuPkg/CpuCacheInfoLib: Sort CpuCacheInfo array
  3c6107758b SecurityPkg: Fix GetSupportedAndActivePcrs counter calculation
  b40bdd6ecd UefiPayloadPkg: Add Fixed PCDs and use Macro to define the default value.
  d497eace3b UefiPayloadPkg: define some PCD as DynamicEX PCD
  ac6e5d6b41 UefiPayloadPkg: change the default value of some PCDs.
  672bd1c711 UefiPayloadPkg: Add a macro to enable or diable the serial driver.
  d02dbb53cd UefiPayloadPkg: Fix the non-ascii character in UniversalPayloadEntry.c
  a7ddc7847c RedfishPkg/JsonLib: Add more JsonLib functions
  5963ce5d28 MdePkg: Add ACPI 6.4 header file
  4d7137f261 MdePkg: Increment FADT version
  d910e83299 MdePkg: Rename SBSA Generic Watchdog to Arm Generic Watchdog
  ad3dea9861 MdePkg: Update PMTT to ACPI 6.4
  ced4cb7609 MdePkg: Add SPA Location Cookie field to SPA Range structure
  c82d6dd4a3 MdePkg: Remove DPPT table
  357383bc4f MdePkg: Add flags and MinTransferSize to Generic Initiator
  7b17bcd9a0 MdePkg: Add 'Type 5' PCC structure
  0938f9235c MdePkg: Add Multiprocessor Wakeup structure
  75c4a8e10d MdePkg: Add the Platform Health Assessment Table (PHAT)
  1803757a9b MdePkg: Add Secure Access Components in the SDEV table
  605c4a1ff2 MdePkg: Add Cache ID to PPTT
  3d359ff905 MdePkg: Fix broken coding style in Acpi64.h
  7311e96417 RedfishPkg/RefishCrtLib: Public RefishCrtLib
  03e19e6bc8 ArmPkg/IndustryStandard: 32b/64b agnostic FF-A, Mm SVC and Std SMC IDs
  aee0098faf ArmPkg: prepare 32bit ARM build of StandaloneMmPkg
  ca1773878d GenFv: Arm: support images entered in Thumb mode
  b7f0226a46 StandaloneMmPkg: fix pointer/int casts against 32bit architectures
  a776bbabd9 StandaloneMmPkg: build for 32bit arm machines
  ac826886c9 MdeModulePkg/UefiSortLib:Add UefiSortLib unit test
  6fdd1c13a7 MdeModulePkg PCD: Reinstall PCD service PPIS when memory available
  ef56f55d19 EmbeddedPkg/NonCoherentDmaLib: Avoid dereferencing unset Map field
  8dd4fc5be6 UefiCpuPkg/CpuCacheInfoLib: Correct logical for identifying cache type
  7b4a99be8a CryptoPkg: BaseCryptLib fix incorrect param order
  - Removed patches which are merged to mainline:
  ovmf-bsc1186151-fix-iscsi-overflows.patch
  ovmf-xen-relocate-shared_info_page-map.patch
  - Updated patches
  ovmf-fix-xen-s3-detection.patch -&gt; ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
  ovmf-xen-add-qemu-kernel-loader-fs.patch -&gt; ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch
  - Added patches
  ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch</changelog>
  <changelog author="jlee@suse.com" date="1634904000">- Removed edk2-stable202105.tar.gz because we updated to edk2-stable202108</changelog>
  <changelog author="jlee@suse.com" date="1635249600">- Removed patches which are merged to mainline:
    ovmf-bsc1186151-fix-iscsi-overflows.patch
    ovmf-xen-relocate-shared_info_page-map.patch
- Removed patches because replaced:
    ovmf-fix-xen-s3-detection.patch -&gt; ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
    ovmf-xen-add-qemu-kernel-loader-fs.patch -&gt; ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1636372800">- Update rpmlintrc (fixes aarch64 build)</changelog>
  <changelog author="jlee@suse.com" date="1638532800">- Merge the difference from SLE for pushing back to SLE15-SP4
  - Add/Update 50-xen-hvm-x86_64.json in descriptors.tar.xz
  - Add the json descriptor for xen-hvm (bsc#1180050)
  - Add "nvram-template" and change the firmware file to
  ovmf-x86_64-ms-4m.bin (bsc#1180050, bsc#1181264)
  - The following patches in SLE are already in edk2-edk2-stable202108
    in factory, so they will be removed from 15-SP4
  - ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
    the potential NULL dereference in AuthenticodeVerify()
    (bsc#1177789, CVE-2019-14584)
  - 26442d11e620a9	edk2-stable202011~124
  - ovmf-bsc1180079-amd-sev-es-mitigation.patch to mitigate the
  potential AMD SEV-ES security issues
  (bsc#1180079)
  - a91b700e385e74	edk2-stable202102~181
  - ovmf-jscSLE-16075-SEV-ES-use-physical-address.patch as the
  follow-up patch for SEV-ES to fix the flash writing
  (jsc#SLE-16075)
  - 3a3501862f7309	edk2-stable202102~105
  - ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption
  (bsc#1183578, CVE-2021-28211)
  - e7bd0dd26db7e5	edk2-stable202011~7
  - ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion
  (bsc#1183579, CVE-2021-28210)
  - b9bdfc72853fe9	edk2-stable202011~9
  - Add ovmf-bsc1186151-fix-iscsi-overflows.patch to fix the possible
  overflows in IScsiDxe
  (bsc#1186151)
  - 83761337ec91fb	edk2-stable202108-rc0~171</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1638792000">- cross-i386-binutils and cross-i386-gcc have been dropped from
  Factory, so use only cross-x86_64-* - boo#1193424</changelog>
  <changelog author="jlee@suse.com" date="1638964800">- For preparing push to SLE15-SP4, add more notes:
  - Drop upstreamed ovmf-jscSLE-16075-SEV-ES-fixes.patch from 15-SP4
  - All patches in the above big patch are in edk2-stable202011
  - Some changes in ovmf.spec file of 15-SP4:
  - brotli-v1.0.7-17-g666c328-c.tar.xz and "add brotli" section
  be removed because ovmf-disable-brotli.patch.
  - Using %{_prefix} instead of /usr hard code.
  - Redundant %defattr(-,root,root) are removed.
  - BuildRoot be removed because factory doesn't have it.
  - Sync some differences in the change log between 15-SP3 with openSUSE
    TW since "Wed Jan 24 06:31:21 UTC 2018":
  - Add TLS and IPv6 supports for ArmVirtQemu.
  - ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  - already in edk2-stable202008
  - Drop the build requirement of python2</changelog>
  <changelog author="jlee@suse.com" date="1640088000">- Update to edk2-stable202111
  - Features (https://github.com/tianocore/edk2/releases):
  Add SSDT CPU topology generator
  Support ACPI 6.4 in GTDT parser and generator
  Support ACPI 6.4 in DynamicTables FADT parser
  Support ACPI 6.4 in Acpiview PCCT parser
  Support ACPI 6.4 in Acpiview HMAT parser
  Add support for the microvm machine type (qemu)
  OVMF/ArmVirt: add support for virtio-mmio 1.0
  IntelFsp2Pkg: adopt FSP 2.3 specification
  UefiCpuPkg VTF0 X64: Build page tables using Linear-Address Translation to a 1-GByte Page
  Enable wildcard host name matching in HTTPS/TLS implementation
  Add QuickSort function into BaseLib
  Add SMM NV variable support in universal UEFI payload
  Add TDVF to OvmfPkg
  Make package and platform builds reproducible across source format changes
  - Patches (git log --oneline --reverse edk2-stable202108~..edk2-stable202111):
  7b4a99be8a CryptoPkg: BaseCryptLib fix incorrect param order
  82f7e315d6 MdeModulePkg/PeiCore: Remove MigrateSecModulesInFv()
  8b15024dc7 Maintainers: Add kraxel as Reviewer to ArmVirtPkg and OvmfPkg
  80e67af9af OvmfPkg: introduce a common work area
  ab77b6031b OvmfPkg/ResetVector: update SEV support to use new work area format
  b9af5037b2 OvmfPkg/ResetVector: move the GHCB page setup in AmdSev.asm
  a82bad9730 ArmPkg/GicV3Dxe: Don't signal EOI on arbitrary interrupts
  94e465e5cb OvmfPkg/Virtio10: Add virtio-mmio 1.0 defines
  08293e43da OvmfPkg/VirtioMmioDeviceLib: Add virtio 1.0 detection.
  212a2b9bb8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Fix SetPageSize.
  537a724421 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Fix SetQueueAddress
  6a3e9576b8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Add default QueueNum
  ae12188cf8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Adapt feature bit handling
  77d5fa8024 OvmfPkg/VirtioMmioDeviceLib: enable virtio 1.0
  b04453d36b MdeModulePkg/EbcDxe: Mitigate memcpy intrinsics
  dc995ce906 MdeModulePkg: Add BootDiscoveryPolicyOld variable.
  443300be46 MdePkg:Update IndustryStandard/Nvme.h with Nvme amdin controller data
  0f11537548 MdeModulePkg:Increase Nvme capacity display
  cae735f613 ArmPkg: Enable boot discovery policy for ARM package.
  cb0d24637d OvmfPkg/OvmfXen: set PcdAcpiS3Enable at initialization
  28152333bc OvmfPkg/LockBoxLib: use PcdAcpiS3Enable to detect S3 support
  52e2dabc0f OvmfPkg/PlatformBootManagerLib: use PcdAcpiS3Enable to detect S3 support
  5b5f10d746 OvmfPkg/SmmControl2Dxe: use PcdAcpiS3Enable to detect S3 support
  9f3eda177a OvmfPkg/OvmfXen: add QemuKernelLoaderFsDxe
  f0fe55bca4 UefiPayloadPkg: Fix the build error when enable Core ci for UefiPayloadPkg
  5d34cc49d5 UefiCpuPkg/PiSmmCpuDxeSmm: Update mPatchCetSupported set condition
  cdda3f74a1 UefiPayloadPkg/UefiPayloadEntry: Fix memory corruption
  3b3f882288 MdeModulePkg/PiSmmCore: Drop deprecated image profiling commands
  b170806518 UefiCpuPkg: Clean up save state boundary checks and comments.
  12e33dca4c IntelFsp2Pkg: Support Config File and Binary delta comparison
  63fddc98e0 UefiPayloadPkg: Create .yaml file in UefiPayloadPkg
  e3ee8c8dbd .azurepipelines: Add UefiPayloadPkg in gate-build-job.yml and CISetting.py
  b6bc203375 MdeModulePkg/HiiDatabaseDxe:remove dead code block
  c5e805ffe1 MdeModulePkg: Fix typo of "memory" in RamDiskDxe debug message
  81d71fb86e Maintainers.txt: Update maintainer/reviewer roles in MdeModulePkg
  edf8bc6d24 SecurityPkg/MemoryOverwriteControl: Add missing argument to DEBUG print
  4473834e7d OvmfPkg/OvmfXen: Fix build with QemuKernelLoaderFsDxe
  a7cf2c5664 RedfishPkg: Fix various typos
  851785ea67 UefiPayloadPkg: Include more modules in UefiPayloadPkg.
  d248516b3a UefiPayloadPkg: Include Network modules in UefiPayloadPkg.
  6c7d6d4a5e UefiCpuPkg: ResetVector Tool Support for Python 3
  cf7c650592 UefiCpuPkg: ResetVector Tool additional debug prints
  d96df7e993 UefiPayloadPkg: Fix the bug in dump guid HOB info functions
  dcd3d63f4f UefiPayloadPkg: Dump hob info from gEdkiiBootManagerMenuFileGuid
  610d8073f2 SecurityPkg/TPM: Import PeiDxeTpmPlatformHierarchyLib.c from edk2-platforms
  4d5f39cd22 SecurityPkg/TPM: Fix bugs in imported PeiDxeTpmPlatformHierarchyLib
  ebbc8ab2cd SecrutiyPkg/Tcg: Import Tcg2PlatformDxe from edk2-platforms
  2906e572c6 SecurityPkg/Tcg: Make Tcg2PlatformDxe buildable and fix style issues
  f108178c56 SecurityPkg: Introduce new PCD PcdRandomizePlatformHierarchy
  a4867dea2a SecurityPkg/Tcg: Import Tcg2PlatformPei from edk2-platforms
  2fa89c8e11 SecurityPkg/Tcg: Make Tcg2PlatformPei buildable and fix style issues
  3b69fcf5f8 SecurityPkg: Add references to header and inf files to SecurityPkg
  6c80564b89 MdeModulePkg/Core/Pei: Fix typo in function descriptions
  6f501a7c9b MdeModulePkg/Core/Pei: Make migrated PEIM message verbose
  c19d18136e MdeModulePkg/Core/Pei: Fix pointer size mismatch in EvacuateTempRam()
  f4e72cf9d6 UefiPayloadPkg: Add script to build UniversalPayload in UefiPayloadPkg
  bda3546c55 UefiPayloadPkg: Fix the warning when building UefiPayloadPkg with IA32+X64
  010753b7e7 UefiCpuPkg: Refactor initialization of CPU features during S3 resume
  89f7ed8b29 UefiCpuPkg: Prevent from re-initializing CPU features during S3 resume
  60d8bb9f28 UefiCpuPkg: VTF0 Linear-Address Translation to a 1-GByte Page till 512GB
  ac6388add4 ArmPkg/ProcessorSubClassDxe: Fix the format of ProcessorId
  e3e47d7963 UefiCpuPkg: SecCoreNative without ResetVector
  542cba73d2 SecurityPkg: Add debug log for indicating IBB verified OBB successfully
  f334c5a41d IntelFsp2WrapperPkg: Make PcdFspModeSelection dynamic
  79019c7a42 OvmfPkg: set a default value for the WorkAreaHeader PCD
  fdeff3fdae EmbeddedPkg: Remove duplicate libfdt.h include
  f2a7e24e38 EmbeddedPkg: AndroidBootImgBoot error handling updates
  c0cd26f43c EmbeddedPkg: Install FDT if UpdateDtb is not present
  7ea7f9c077 EmbeddedPkg: Add LoadFile2 for linux initrd
  d60915b751 UefiPayloadPkg: Add Macro to enable or disable some drivers.
  46b4606ba2 MdeModulePkg/PciBusDxe: Improve the flow of testing support attributes
  f57040b038 MdeModulePkg/BootManagerMenuApp: Limit string drawing within one line
  b0f1b1c5fd MdePkg: Fix DEVICE_SECURITY_EVENT_DATA_HEADER version definition
  cc5a67269e UefiPayloadPkg: Build a HOB from bootloader ACPI table
  dc430ccf3f UefiPayloadPkg: Use dummy constructor for PlatformHookLib
  4a1899dd79 UefiPayloadPkg: Add ".upld_info" in universal payload
  2ea0a0a414 BaseTools: Switch to downloading the ARM compiler from Arm's site
  1ce6ceb75b BaseTools: Switch to downloading the AARCH64 compiler from Arm's site
  c214128a38 BaseTools/GenMake: Use ToolDefinition as fallback option
  259c184c8f BaseTools/build: Set MakefileName
  445c39f757 BaseTools: Remove Makefile/MakefileName fields
  c7d5b046d9 BaseTools: Remove hard-coded strings for target and tools_def
  442e46d3b6 UefiPayloadPkg: Update maximum logic processor to 256
  499c4608b1 OvmfPkg/TPM PPI: Connect default consoles for user interaction
  b8675deaa8 OvmfPkg: Handle TPM 2 physical presence opcodes much earlier
  8ab8fbc016 OvmfPkg: Reference new Tcg2PlatformDxe in the build system for compilation
  bd298d7593 OvmfPkg: Reference new Tcg2PlatformPei in the build system
  f86de75862 MdePkg: MmCommunication: Added definition of MM Communication PPI
  8b4bb94f64 MdePkg: CI YAML: Added new GUID to ignore duplicate list
  9e950cda6a MdeModulePkg: CI YAML: Added new GUID to ignore duplicate list
  2273799677 SecurityPkg: Fix SecureBootDefaultKeysDxe failed to start
  422e5d2f7f UefiPayloadPkg: Remove asm code and sharing libraries
  0875443f7e DynamicTablesPkg: Extract AcpiHelperLib from TableHelperLib
  20775950c6 DynamicTablesPkg: Update TableHelperLib.inf
  1ad5182500 DynamicTablesPkg: Rename single char input parameter
  653113412f DynamicTablesPkg: Add HexFromAscii() to AcpiHelperLib
  72ab552554 DynamicTablesPkg: Add AmlGetEisaIdFromString() to AcpiHelperLib
  96e006b37e DynamicTablesPkg: Add Configuration Manager Object parser
  235ff9fcd1 DynamicTablesPkg: Use %a formatter in AmlDbgPrint
  7a8c037e9e DynamicTablesPkg: Update DynamicTablesPkg.ci.yaml
  691c5f7762 DynamicTablesPkg: Deprecate Crs specific methods in AmlLib
  22873f58c4 DynamicTablesPkg: Rework AmlResourceDataCodegen.c/h
  4cc1458dbe IntelFsp2Pkg: Adopt FSP 2.3 specification.
  c49cb8f30e ArmPkg: SmbiosMiscDxe: Don't populate ExtendedBiosSize when size &lt; 16MB
  282122ec5f ArmVirtPkg/TPM: Add a NULL implementation of TpmPlatformHierarchyLib
  b3685956d2 ArmVirtPkg: Reference new TPM classes in the build system for compilation
  c806b76865 ArmVirtPkg: Disable the TPM2 platform hierarchy
  606340fba3 OvmfPkg/Microvm: copy OvmfPkgX64 files as-is
  4932f05a00 OvmfPkg/Microvm: rename output files, fix includes
  2a49c19b9e OvmfPkg/Microvm: no smm
  60d55c4156 OvmfPkg/Microvm: no secure boot
  0569c52b15 OvmfPkg/Microvm: no tpm
  06fa1f1931 OvmfPkg/Microvm: no sev
  6073bf6cd8 OvmfPkg/Microvm: no csm
  b9dd64b80e OvmfPkg/Microvm: no emulated scsi
  27de86ae41 OvmfPkg/Microvm: use MdePkg/Library/SecPeiDxeTimerLibCpu
  76602f45dc OvmfPkg/Microvm: use XenTimerDxe (lapic timer)
  6a8e9ad24b OvmfPkg/Microvm: PlatformPei/MemDetect tweaks
  8583b57c5c OvmfPkg/Microvm: PlatformPei/Platform memory map tweaks
  bf02d73e74 OvmfPkg/Microvm: PlatformPei/Platform: add id.
  1d3e89f349 OvmfPkg/ResetSystemLib: add driver for microvm
  2c467c9be2 OvmfPkg/Microvm: BdsPlatform: PciAcpiInitialization tweak.
  8456785986 OvmfPkg/Microvm: use PciHostBridgeLibNull
  55f47d2299 OvmfPkg/Microvm: wire up serial console, drop super-io
  862e814de4 OvmfPkg/Microvm: add Maintainers.txt entry
  06a326caf1 DynamicTablesPkg: Update FADT generator to ACPI 6.4
  f09dbf20b9 DynamicTablesPkg: Rename SBSA generic watchdog
  942c9bd357 ShellPkg: Update Acpiview GTDT parser to ACPI 6.4
  80e67bcb23 ShellPkg: Update Acpiview PCCT parser to ACPI 6.4
  b4da6c29f1 ShellPkg: Add Type 5 PCC Subspace Structure parser
  5ece2ad36c MdeModulePkg/Core/Dxe: Add lock protection in CoreLocateHandleBuffer()
  30400318a2 ShellPkg: Update Acpiview HMAT parser to ACPI spec version 6.4
  71c3c9c0c4 DynamicTablesPkg: Remove unnecessary includes
  25cf58a163 DynamicTablesPkg: Add missing parameter check
  bfaf7c8b9e DynamicTablesPkg: Add AddSsdtAcpiHeader()
  28b2df475f DynamicTablesPkg: Add AmlRdSetEndTagChecksum()
  74addfeab6 DynamicTablesPkg: Add AmlSetRdListCheckSum()
  7b2022d39e DynamicTablesPkg: Set EndTag's Checksum if RdList is modified
  2dd7dd3952 DynamicTablesPkg: Clear pointer in node creation fcts
  37bd08176c DynamicTablesPkg: Update error handling for node creation
  6d2777d85f DynamicTablesPkg: Make AmlNodeGetIntegerValue public
  f995f8672b DynamicTablesPkg: AML Code generation for Register()
  9454d1ebcb DynamicTablesPkg: AML Code generation for Resource data EndTag
  1e33479b39 DynamicTablesPkg: AML code generation for a Package
  12e65fd258 DynamicTablesPkg: Helper function to compute package length
  ce15936f2f DynamicTablesPkg: AML code generation for a ResourceTemplate
  de62ccbf4f DynamicTablesPkg: AML code generation for a Method
  e2d7b4950b DynamicTablesPkg: AML code generation to Return a NameString
  3e958e93ce DynamicTablesPkg: AML code generation for a Method returning a NS
  018a962d92 DynamicTablesPkg: AML code generation for a _LPI object
  a5e36ad9bc DynamicTablesPkg: AML code generation to add an _LPI state
  f17ef10e63 DynamicTablesPkg: Add CM_ARM_LPI_INFO object
  769e63999f DynamicTablesPkg: SSDT CPU topology and LPI state generator
  19ee56c4b3 UefiPayloadPkg: Add a macro to select the SecurityStubDxe driver.
  782d018703 MdePkg: Add ProcessorUpgradeSocketLGA4677 from SMBIOS 3.5.0
  ba4ae92234 ShellPkg: Support ProcessorUpgradeSocketLGA4677 from SMBIOS 3.5.0
  f22feb0e3b CryptoPkg/BaseCryptLib: Eliminate extra buffer copy in Pkcs7Verify()
  4225a464c6 MdePkg/BaseLib: Add QuickSort function on BaseLib
  6ed6abd6c1 BaseTools: Change RealPath to AbsPath
  978d428ec3 UefiPayloadPkg: Add PCI root bridge info hob support for SBL
  43b3840873 MdeModulePkg/Sd: Corrections for Extra.uni files
  a7fcab7aa3 MdeModulePkg/Core/Dxe: Acquire a lock when iterating gHandleList
  e40fefafa9 ArmVirtPkg/FdtClintDxe: Move FdtClientDxe to EmbeddedPkg
  fb759b8b73 MdePkg: Add PcdPciIoTranslation PCD
  7d78a86ecf ArmPkg: Use PcdPciIoTranslation PCD from MdePkg
  77e9b3a7c6 ArmVirtPkg/FdtPciPcdProducerLib: Relocate PciPcdProducerLib to OvmfPkg
  d881c6ddf5 ArmVirtPkg/HighMemDxe: Relocate HighMemDxe to OvmfPkg
  47bd85e9f9 OvmfPkg/HighMemDxe: Add RISC-V in the supported arch.
  f8d0501ded ArmVirtPkg/QemuFwCfgLib: Relocate QemuFwCfgLib to OvmfPkg
  26aa241d2f OvmfPkg/QemuFwCfgLibMmio: Add RISC-V arch support
  c6770f4b88 MdePkg: Add PcdPciMmio32(64)Translation PCDs
  9a7509e465 ArmVirtPkg/FdtPciHostBridgeLib: Relocate FdtPciHostBridgeLib to OvmfPkg/Fdt
  b21c6794de OvmfPkg/FdtPciHostBridgeLib: Add RISC-V in the supported arch.
  e0c23cba5e ArmVirtPkg/VirtioFdtDxe: Relocate VirtioFdtDxe to OvmfPkg/Fdt
  f2400e06db BaseTools: add edk2-test repo to SetupGit.py
  785cfd3305 UefiPayloadPkg: Use SECURITY_STUB_ENABLE to control the SecurityStubDxe
  7e43d3e086 ArmPkg/Smbios: Fix max cache size 2 wrong issue
  f10a112f08 UefiPayloadPkg: Fix the build issue for coreboot
  2108698346 StandaloneMmPkg: Support CLANGPDB builds
  11a4af85a4 Ovmfpkg: update Ia32 build to use new work area
  36b561623a OvmfPkg/AmdSev: update the fdf to use new workarea PCD
  91a978ce7e UefiPayloadPkg: Replace MEMROY_ENTRY by MEMORY_ENTRY
  6ef5797447 UefiPayloadPkg: Fix ECC reported issues
  90246a6d9f UefiPayloadPkg: Fix the build failure for non-universal payload
  37a33f02aa UefiCpuPkg: Cpu feature data stored in memory may be migrated
  4fdf843c75 DynamicTablesPkg: Fix unitialized variable use
  6893865b30 DynamicTablesPkg: Fix void pointer arithmetic
  99325a8b65 MdeModulePkg/SortLib: Add QuickSort function on BaseLib
  305fd6bee0 UefiCpuPkg/CpuCacheInfoLib: Add QuickSort function on BaseLib
  2f286930a8 ShellPkg: Parse I/O APIC and x2APIC structure
  bd5ec03d87 NetworkPkg/HttpBootDxe: make file extension check case-insensitive
  6254037223 ArmPkg: Implement PlatformBootManagerLib for LinuxBoot
  f079e9b450 OvmfPkg: Copy Main.asm from UefiCpuPkg to OvmfPkg's ResetVector
  5a2411784b OvmfPkg: Clear WORK_AREA_GUEST_TYPE in Main.asm
  c9ec74a198 OvmfPkg: Add IntelTdxMetadata.asm
  8b76f23534 OvmfPkg: Enable TDX in ResetVector
  87a34ca0cf UefiPayloadPkg: Add a common SmmAccessDxe module
  e7e8ea27d4 UefiPayloadPkg: Add a common SMM control Runtime DXE module
  bed990aae6 UefiPayloadPkg: Add bootloader SMM support module
  1d66480aa4 UefiPayloadPkg: Add SpiFlashLib
  04714cef46 UefiPayloadPkg: Add FlashDeviceLib
  ae8acce8ae UefiPayloadPkg: Add a common FVB SMM module
  242dcfe30f UefiPayloadPkg: Add a SMM dispatch module
  b80c17b62d UefiPayloadPkg: Add SMM support and SMM variable support
  2f6f3329ad FmpDevicePkg/FmpDxe: Use new Variable Lock interface
  9a95d11023 IntelFsp2Pkg/SplitFspBin.py: adopt FSP 2.3 specification.
  bb146ce32d MdePkg Cpuid.h: Define CPUID.(EAX=7,ECX=0):EDX[30]
  1bc232aae3 RedfishPkg: Update link to staging/RedfishClientPkg in Readme.md
  e7663fdd82 UefiPayloadPkg: Remove SystemTableInfo GUID.
  91b772ab62 RedfishPkg: Add more information to Readme.md
  c8594a5311 SecurityPkg/FvReportPei: Remove the ASSERT to allow neither M nor V
  939c2355da IntelFsp2Pkg SplitFspBin.py: Correct file name in file header
  6f9e83f757 NetworkPkg/HttpDxe: Enable wildcard host name matching for HTTP+TLS.
  b258f12889 BaseTools/VrfCompile: Fix uninitialized field from unnamed field
  0f4cdad25b DynamicTablesPkg: Add missing BaseStackCheckLib instance
  e13e53cb2f NetworkPkg/NetworkPkg.dsc: Add RngLib mapping for ARM and RISCV64
  c1f2287635 SecurityPkg/SecurityPkg.dsc: Add missing RngLib for ARM and RISCV64
  b0a03ca4a9 SignedCapsulePkg/SignedCapsulePkg.dsc: Add RngLib mapping
  15e635d1b5 UefiCpuPkg/MtrrLib/UnitTest: Fix 32-bit GCC build issues
  4050c873b5 MdeModulePkg/Variable/RuntimeDxeUnitTest: Fix 32-bit GCC builds
  d79df34beb BaseTools: Fix StructurePcd offset error.
  b5d4a35d90 MdeModulePkg/XhciSched: Fix missing DEBUG arguments
  48452993ad MdePkg/Include: Enhance DebugLib to support reproduce builds
  5948ec3647 MdePkg: Reproduce builds across source format changes
  f331310a10 ArmPkg: Reproduce builds across source format changes
  77dcd03ecf MdeModulePkg: Reproduce builds across source format changes
  45137bca2f NetworkPkg: Reproduce builds across source format changes
  d939a25d41 SecurityPkg: Reproduce builds across source format changes
  fd42dcb1fc OvmfPkg: Reproduce builds across source format changes
  8c1b1fe634 ShellPkg: Add comment that ItemPtr is set after validation
  d6e6337cd6 MdePkg: Fix ACPI memory aggregator/device type mismatch
  c974257821 MdeModulePkg AtaAtapiPassThru: Always do S.M.A.R.T. check if device support
  aab6bb3d32 MdeModulePkg/DxeCapsuleLibFmp: Capsule on Disk file name capsule
  a7b35aae13 MdeModulePkg\UfsBlockIoPei: UFS MMIO address size support both 32/64 bits
  f826b20811 UefiCpuPkg/UefiCpuLib: Add GetCpuFamilyModel and GetCpuSteppingId
  8c8867c5da MdeModulePkg/DxeCapsuleLibFmp: Use new Variable Lock interface
  22c3b5a865 BaseTools: Add authenticated variable store support
  a92559671a OvmfPkg/Xen: Fix VS2019 build issues
  4c495e5e3d OvmfPkg/Bhyve/PlatformPei: Fix VS2019 X64 NOOPT build issue
  466ebdd2e0 MdeModulePkg/FPDT: Lock boot performance table address variable at EndOfDxe
  455b0347a7 UefiCpuPkg/PiSmmCpuDxeSmm: Use SMM Interrupt Shadow Stack
  e1e7306b54 OvmfPkg/Library/ResetSystemLib: Fix Microvm VS2019 NOOPT build issue
  4c7ce0d285 MdeModulePkg AtaAtapiPassThru: Skip the potential NULL pointer access
  bb1bba3d77 NetworkPkg: Fix invalid pointer for DNS response token on error
  - Removed patches which are merged to mainline:
  - ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch to fix the
    S3 detection in ovmf-xen
  - cb0d24637d    edk2-stable202111-rc1~220
  - ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch to add QemuKernelLoaderFsDxe
    to ovmf-xen to load kernel from qemu fw_cfg
  - 9f3eda177a    edk2-stable202111-rc1~216
  - ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch
  - 4473834e7d    edk2-stable202111-rc1~203
  - The edk2-stable202111 includes the following patches for bsc#1192126
    to fix unlimited reset. (bsc#1192126)
    80e67af9af OvmfPkg: introduce a common work area
    ab77b6031b OvmfPkg/ResetVector: update SEV support to use new work area format
    b9af5037b2 OvmfPkg/ResetVector: move the GHCB page setup in AmdSev.asm</changelog>
  <changelog author="jlee@suse.com" date="1640260800">- Removed useless patch files because they are merged to edk2-stable202111
  - ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch
  - ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch
  - ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
- Updated URL to the edk2 repo on github
- Use downloaded edk2-edk2-stable%{version}.tar.gz instead of the URL
  for Source0 because the edk2-edk2-stable202111 tarball is broken
  in tianocore repo which can not pass the "osc service runall download_files"
  testing.
  - We ill change it back to the following setting when upstream fixed tarball:
  Source0:        https://github.com/tianocore/edk2/releases/download/edk2-stable%{version}/edk2-edk2-stable%{version}.tar.gz</changelog>
  <changelog author="jlee@suse.com" date="1641211200">- Modified gdb_uefi.py.in for python3 (bsc#1192126)
  - change 'long' to 'int'
  - using
    print ('
    instead of
    print "</changelog>
  <changelog author="bwiedemann@suse.com" date="1645099200">- Sort file lists for reproducible build results</changelog>
  <changelog author="jlee@suse.com" date="1646913600">- Update to edk2-stable202202
  - Features (https://github.com/tianocore/edk2/releases):
  OvmfPkg Add new target for Cloud Hypervisor
  Add TDVF to OvmfPkg
  Add new APIs to UefiCpuPkg/UefiCpuLib
  Add AMD Secure Nested Paging Support
  Add SSDT PCI generator in DynamicTablesPkg
  Support ACPI 6.4 PPTT changes
  Add FdtHwInfoParser library
  Add DynamicPlatRepo library
  Make package and platform builds reproducible across source format changes
  Add Uncrustify CI Plugin
  Apply uncrustify changes to all package C and H files
  - Patches (git log --oneline --reverse edk2-stable202111~..edk2-stable202202):
  bb1bba3d77 NetworkPkg: Fix invalid pointer for DNS response token on error
  ef9a059cdb EmulatorPkg/Win/Host: Update CC_FLAGS
  69877614fd .pytool/Plugin/EccCheck: Remove RevertCode()
  854462bd34 .pytool/Plugin/EccCheck: Remove temp directory on exception
  3019f1bbab .pytool/Plugin/EccCheck: Add performance optimizations
  99f84ff473 .pytools/Plugin/LicenseCheck: Use temp directory for git diff output
  76a1ce4d5f .azurepipelines/templates: Update max pipeline job time to 2 hours
  365dced2c3 ArmPkg: Update YAML to ignore specific ECC files/errors
  1939fc9569 ArmPlatformPkg: Update YAML to ignore specific ECC files/errors
  c97fee87f0 ArmVirtPkg: Update YAML to ignore specific ECC files/errors
  d5744ecba8 CryptoPkg: Update YAML to ignore specific ECC files/errors
  d7d30e8f21 EmulatorPkg: Update YAML to ignore specific ECC files/errors
  9deb937076 MdeModulePkg: Update YAML to ignore specific ECC files/errors
  df790cd6b3 MdePkg: Update YAML to ignore specific ECC files/errors
  60fa40be45 SecurityPkg: Update YAML to ignore specific ECC files/errors
  9944508e85 ShellPkg: Update YAML to ignore specific ECC files/errors
  c30c40d6c6 StandaloneMmPkg: Update YAML to ignore specific ECC files/errors
  c057347977 UefiPayloadPkg: Update YAML to ignore specific ECC files/errors
  f0f3f5aae7 UnitTestFrameworkPkg: Update YAML to ignore specific ECC files/errors
  dfafa8e453 MdeModulePkg/DxeCorePerformanceLib:Variable Initial
  a4a582e180 ArmPkg: Change use of EFI_D_* to DEBUG_*
  1d2482e1e3 ArmPlatformPkg: Change use of EFI_D_* to DEBUG_*
  c5b3a56e4f ArmVirtPkg: Change use of EFI_D_* to DEBUG_*
  a1878955b2 EmbeddedPkg: Change use of EFI_D_* to DEBUG_*
  9c7da8d804 EmulatorPkg: Change use of EFI_D_* to DEBUG_*
  917e98f3e5 FatPkg: Change use of EFI_D_* to DEBUG_*
  87000d7708 MdeModulePkg: Change use of EFI_D_* to DEBUG_*
  5f289f3ae3 MdePkg: Change use of EFI_D_* to DEBUG_*
  c49ca4a29e NetworkPkg: Change use of EFI_D_* to DEBUG_*
  47719926e8 OvmfPkg: Change use of EFI_D_* to DEBUG_*
  ca56749b0e PcAtChipsetPkg: Change use of EFI_D_* to DEBUG_*
  e905fbb05a SecurityPkg: Change use of EFI_D_* to DEBUG_*
  4a1aee13d8 ShellPkg: Change use of EFI_D_* to DEBUG_*
  586fda4800 SourceLevelDebugPkg: Change use of EFI_D_* to DEBUG_*
  96e1cba5c1 UefiCpuPkg: Change use of EFI_D_* to DEBUG_*
  1871d28eaf ArmPkg: Change OPTIONAL keyword usage style
  2863ba97ca ArmPlatformPkg: Change OPTIONAL keyword usage style
  9607597a74 ArmVirtPkg: Change OPTIONAL keyword usage style
  c8f46130f8 CryptoPkg: Change OPTIONAL keyword usage style
  fe2d81892f DynamicTablesPkg: Change OPTIONAL keyword usage style
  792433088c EmbeddedPkg: Change OPTIONAL keyword usage style
  c69fc80c80 EmulatorPkg: Change OPTIONAL keyword usage style
  9c721071d3 FmpDevicePkg: Change OPTIONAL keyword usage style
  e3917e22e7 MdeModulePkg: Change OPTIONAL keyword usage style
  d0e2f8232a MdePkg: Change OPTIONAL keyword usage style
  8874fa199d NetworkPkg: Change OPTIONAL keyword usage style
  79d49e162e OvmfPkg: Change OPTIONAL keyword usage style
  237295f46d PcAtChipsetPkg: Change OPTIONAL keyword usage style
  dc8fe5ec95 RedfishPkg: Change OPTIONAL keyword usage style
  12710fe93b SecurityPkg: Change OPTIONAL keyword usage style
  9b8507cabe ShellPkg: Change OPTIONAL keyword usage style
  18908e6131 SignedCapsulePkg: Change OPTIONAL keyword usage style
  f9c9215b55 SourceLevelDebugPkg: Change OPTIONAL keyword usage style
  902e76de19 StandaloneMmPkg: Change OPTIONAL keyword usage style
  4ec586b9f6 UefiCpuPkg: Change OPTIONAL keyword usage style
  e35dd32821 UefiPayloadPkg: Change OPTIONAL keyword usage style
  78bc3bdd2a UnitTestFrameworkPkg: Change OPTIONAL keyword usage style
  ea85f0fe13 ArmVirtPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  e3b855f283 CryptoPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  4a9d411662 DynamicTablesPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  db52c7f755 MdeModulePkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  098307e082 MdePkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  ed7f7c9168 NetworkPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  8e875037bf OvmfPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  deba54761a PcAtChipsetPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  f9f4fb2329 SecurityPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  7c2a6033c1 UefiCpuPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  429309e0c6 ArmPkg: Apply uncrustify changes
  40b0b23ed3 ArmPlatformPkg: Apply uncrustify changes
  2b16a4fb91 ArmVirtPkg: Apply uncrustify changes
  7c34237831 CryptoPkg: Apply uncrustify changes
  731c67e1d7 DynamicTablesPkg: Apply uncrustify changes
  e7108d0e96 EmbeddedPkg: Apply uncrustify changes
  a550d468a6 EmulatorPkg: Apply uncrustify changes
  bcdcc4160d FatPkg: Apply uncrustify changes
  45ce0a67bb FmpDevicePkg: Apply uncrustify changes
  111f2228dd IntelFsp2Pkg: Apply uncrustify changes
  7c7184e201 IntelFsp2WrapperPkg: Apply uncrustify changes
  1436aea4d5 MdeModulePkg: Apply uncrustify changes
  2f88bd3a12 MdePkg: Apply uncrustify changes
  d1050b9dff NetworkPkg: Apply uncrustify changes
  ac0a286f4d OvmfPkg: Apply uncrustify changes
  5220bd211d PcAtChipsetPkg: Apply uncrustify changes
  39de741e2d RedfishPkg: Apply uncrustify changes
  c411b485b6 SecurityPkg: Apply uncrustify changes
  47d20b54f9 ShellPkg: Apply uncrustify changes
  b878648967 SignedCapsulePkg: Apply uncrustify changes
  c1e126b119 SourceLevelDebugPkg: Apply uncrustify changes
  91415a36ae StandaloneMmPkg: Apply uncrustify changes
  053e878bfb UefiCpuPkg: Apply uncrustify changes
  e5efcf8be8 UefiPayloadPkg: Apply uncrustify changes
  7c0ad2c338 UnitTestFrameworkPkg: Apply uncrustify changes
  dc453b5164 .pytool/Plugin/UncrustifyCheck: Add Uncrustify CI plugin
  1832eb15aa UefiPayloadPkg/UefiPayloadPkg.fdf: Update DXE Apriori list
  ca78281c25 UefiPayloadPkg/PayloadEntry: Inherit 4/5-level paging from bootloader
  b2f7ee2ded UefiPayloadPkg: Increase SystemMemoryUefiRegionSize from 32M to 64M
  94e0a7bddb UefiPayloadPkg: Add missing Guid gUefiAcpiBoardInfoGuid
  2527723de9 UefiPayloadPkg: Add performance measurement feature
  ffdde9d719 UefiPayloadPkg: Skip ModuleInfo HOB in Payload
  965292135b UefiPayloadPkg/UefiPayloadPkg.dsc:Add BootManagerLib for BootManagerMenuApp
  85a678bf76 UefiPayloadPkg: Add integration instruction for coreboot common error
  7b28310008 BaseTools: Increase the DevicePath length for support more PCD value.
  d25b803e51 MdeModulePkg/Bus/Pci/UhciDxe: Fix the UsbHc memory allocate and free issue
  c82ab4d8c1 BaseTools/VfrCompile: Correct Bit Field Flags for numeric/one of
  2ddacfb6b8 OvmfPkg/SecMain: move SEV specific routines in AmdSev.c
  e2289d19d8 UefiCpuPkg/MpInitLib: move SEV specific routines in AmdSev.c
  2fe8edfe55 OvmfPkg/ResetVector: move clearing GHCB in SecMain
  3053183d41 OvmfPkg/ResetVector: introduce SEV metadata descriptor for VMM use
  707c71a01b OvmfPkg: reserve SNP secrets page
  cca9cd3dd6 OvmfPkg: reserve CPUID page
  f2dc28f0b6 OvmfPkg/ResetVector: pre-validate the data pages used in SEC phase
  34819f2cac OvmfPkg/ResetVector: use SEV-SNP-validated CPUID values
  d9822304ce OvmfPkg/MemEncryptSevLib: add MemEncryptSevSnpEnabled()
  7c3b2892ea OvmfPkg/SecMain: register GHCB gpa for the SEV-SNP guest
  d2b998fbdc OvmfPkg/VmgExitLib: use SEV-SNP-validated CPUID values
  a19b648952 OvmfPkg/PlatformPei: register GHCB gpa for the SEV-SNP guest
  19914edc5a OvmfPkg/AmdSevDxe: do not use extended PCI config space
  ade62c18f4 OvmfPkg/MemEncryptSevLib: add support to validate system RAM
  d706f8fec2 OvmfPkg/MemEncryptSevLib: add function to check the VMPL0
  11b15336f0 OvmfPkg/BaseMemEncryptSevLib: skip the pre-validated system RAM
  d39f8d88ec OvmfPkg/MemEncryptSevLib: add support to validate &gt; 4GB memory in PEI phase
  202fb22be6 OvmfPkg/SecMain: validate the memory used for decompressing Fv
  8eb79b5f4f OvmfPkg/PlatformPei: validate the system RAM when SNP is active
  26210f9436 MdePkg: Define ConfidentialComputingGuestAttr
  504ae26b80 OvmfPkg/PlatformPei: set PcdConfidentialComputingAttr when SEV is active
  b95908e043 UefiCpuPkg/MpInitLib: use PcdConfidentialComputingAttr to check SEV status
  f4e3ce5f53 UefiCpuPkg: add PcdGhcbHypervisorFeatures
  f5a6e1bab5 OvmfPkg/PlatformPei: set the Hypervisor Features PCD
  2c354252be MdePkg/GHCB: increase the GHCB protocol max version
  9c703bc0f1 UefiCpuPkg/MpLib: add support to register GHCB GPA when SEV-SNP is enabled
  d4d7c9ad5f UefiCpuPkg/MpInitLib: use BSP to do extended topology check
  b928eb44d5 OvmfPkg/MemEncryptSevLib: change the page state in the RMP table
  b7b8872031 OvmfPkg/MemEncryptSevLib: skip page state change for Mmio address
  ea3a12d970 OvmfPkg/PlatformPei: mark cpuid and secrets memory reserved in EFI map
  67484aed69 OvmfPkg/AmdSev: expose the SNP reserved pages through configuration table
  06544455d0 UefiCpuPkg/MpInitLib: Use SEV-SNP AP Creation NAE event to launch APs
  0f1d7477c0 OvmfPkg: Remove unused print service driver (PrintDxe)
  30631f0a26 MdePkg: Add missing Cache ID (in)valid define
  0077c22f6d MdePkg: Remove PPTT ID type structure
  a50b65ce22 ShellPkg: Update Acpiview PPTT parser to ACPI 6.4
  8cf2bdfcfb ShellPkg: Add Cache ID to PPTT parser
  b2bbe3df54 DynamicTablesPkg: Remove PPTT ID structure from ACPI 6.4 generator
  e139829dd6 DynamicTablesPkg: Update PPTT generator to ACPI 6.4
  e81a81e584 DynamicTablesPkg: Add CacheId to PPTT generator
  9afcd48a94 OvmfPkg: Handle Cloud Hypervisor host bridge
  2ccefa32a6 OvmfPkg: Create global entry point for SMBIOS parsing
  d8ef774346 OvmfPkg: Retrieve SMBIOS from Cloud Hypervisor
  66bce05f6d OvmfPkg: Generalize AcpiPlatformDxe
  7594c5bfe2 OvmfPkg: Install ACPI tables for Cloud Hypervisor
  f6df289a1c OvmfPkg/OvmfXen: Fix Xen build
  2b20a34fd5 OvmfPkg-EmuVariableFvbRuntimeDxe: Support Access To Memory Above 4G
  d5efc875ef MdePkg: Introduce CcMeasurementProtocol for CC Guest firmware
  a124cd4ef9 SecurityPkg: Support CcMeasurementProtocol in DxeTpm2MeasureBootLib
  8c06c53b58 SecurityPkg: Support CcMeasurementProtocol in DxeTpmMeasurementLib
  adf070ff56 OvmfPkg/Microvm: add PcdConfidentialComputingGuestAttr
  2686468c43 OvmfPkg/Bhyve: add MemEncryptSevLib
  61be49e0f7 OvmfPkg/PlatformCI: factor out PlatformBuildLib.py
  21ee379407 OvmfPkg/PlatformCI: add QEMU_SKIP
  64bccda534 OvmfPkg/PlatformCI: add BhyveBuild.py
  04eacd3943 OvmfPkg/PlatformCI: add MicrovmBuild.py
  8b8ae609a7 OvmfPkg/PlatformCI: add AmdSevBuild.py
  2722856a87 OvmfPkg/PlatformCI: dummy grub.efi for AmdSev
  1203eba58e OvmfPkg/PlatformCI: add XenBuild.py
  64ef0dd1d3 OvmfPkg/Microvm/fdt: add device tree support
  79dcaf7054 OvmfPkg/Microvm/fdt: load fdt from fw_cfg
  c802f8935c OvmfPkg/Microvm/fdt: add empty fdt
  2a68abf6ee OvmfPkg/Microvm/virtio: add virtio-mmio support
  e07d27e24d OvmfPkg/Microvm: add README
  7f1861be2b DynamicTablesPkg: AML Code generation for memory ranges
  0e7147fe75 DynamicTablesPkg: AML Code generation to create a named Package()
  fd5fc4bbb7 DynamicTablesPkg: AML Code generation to create a named ResourceTemplate()
  b2b8def4e3 DynamicTablesPkg: AML Code generation to add _PRT entries
  69ddfee1c3 DynamicTablesPkg: Add AmlAttachNode()
  ce306e48eb DynamicTablesPkg: Add Pci related objects
  e35a746cf5 DynamicTablesPkg: SSDT Pci express generator
  ec37fd9c1f DynamicTablesPkg: Fix multiple objects parsing
  557dede8a6 OvmfPkg/PlatformPei: ScanOrAdd64BitE820Ram improvements
  759e3c6d21 OvmfPkg/PlatformPei: prefer etc/e820 for memory detection
  41d8bb3038 OvmfPkg/PlatformPei: stop using cmos for memory detection
  7a6e6ae933 EmulatorPkg: Update lldbefi.py to work with current lldb which uses python3
  4d30352445 ArmPkg: Add SMC helper functions
  c039fa7ff0 ArmPkg: Update SMC calls to use the new ArmCallSmc0/1/2/3 functions
  90ad4b3b34 DynamicTablesPkg: Definition for HwInfoParser interface
  d59c5a20f8 DynamicTablesPkg: FdtHwInfoParser: CM Object descriptor helper
  5d8b5d171c DynamicTablesPkg: FdtHwInfoParser: Add FDT utility functions
  8d2691c3d5 DynamicTablesPkg: FdtHwInfoParser: Add Boot Arch parser
  3ebe1ff5c9 DynamicTablesPkg: FdtHwInfoParser: Generic Timer Parser
  51941f7558 DynamicTablesPkg: FdtHwInfoParser: Add Serial port parser
  e366a41ef0 DynamicTablesPkg: FdtHwInfoParser: Add GICC parser
  0fa1217726 DynamicTablesPkg: FdtHwInfoParser: Add GICD parser
  b04cf355a0 DynamicTablesPkg: FdtHwInfoParser: Add MSI Frame parser
  d250d408cf DynamicTablesPkg: FdtHwInfoParser: Add ITS parser
  7b6c8b30a5 DynamicTablesPkg: FdtHwInfoParser: Add GICR parser
  26bf034a59 DynamicTablesPkg: FdtHwInfoParser: Add GIC dispatcher
  c67bf628c8 DynamicTablesPkg: FdtHwInfoParser: Add PCI config parser
  deb01dfd7f DynamicTablesPkg: Add FdtHwInfoParser library
  9006967c8d DynamicTablesPkg: Handle 16550_WITH_GAS id
  b2d0ed20fd DynamicTablesPkg: Definition for DynamicPlatRepoLib interface
  2e2db65e39 DynamicTablesPkg: DynamicPlatRepo: Add TokenGenerator
  740e3bb634 DynamicTablesPkg: DynamicPlatRepo: Add TokenFixer
  5fe5b6f94f DynamicTablesPkg: DynamicPlatRepo: Add TokenMapper
  38f6d78c3b DynamicTablesPkg: Add DynamicPlatRepo library
  f14fff5135 StandaloneMmPkg/FvLib: Support large file with EFI_FFS_FILE_HEADER2.
  3a72ec71cd OvmfPkg: remove unused TPM options from MicrovmX64.dsc
  b47575801e OvmfPkg: move tcg configuration to dsc and fdf include files
  5711ff4d0b OvmfPkg: drop TPM_CONFIG_ENABLE
  b819388772 OvmfPkg: create Tcg12ConfigPei.inf
  4de8d61bce OvmfPkg: rework TPM configuration
  e6ea1464a8 OvmfPkg/PlatformPei: Revert "stop using cmos for memory detection"
  a6c0418651 ArmPkg/SmbiosMiscDxe: Remove duplicate HII string definition
  45e3842970 ArmPkg/SmbiosMiscDxe: Get full SMBIOS strings from OemMiscLib
  b451c69088 ArmPkg/ProcessorSubClassDxe: Get serial and part number from OemMiscLib
  8ed8568922 SecurityPkg: Debug code to audit BIOS TPM extend operations
  195f011973 SecurityPkg: Reallocate TPM Active PCRs based on platform support
  ab5ab2f603 SecurityPkg: TPM must go to Idle state on CRB command completion
  c63a10ecb7 EmbeddedPkg/AcpiLib: Add more helper functions
  f129b1f06f OvmfPkg/Bhyve: fix tls-enabled build
  ee1f8262b8 OvmfPkg: Call PlatformInitializeConsole for GPU passthrough case
  de9e5b7dc7 IntelFsp2WrapperPkg : FSPM/S UPD data address based on Build Type
  9ec2cc1f31 IntelFsp2WrapperPkg : Remove EFIAPI from local functions.
  ae8272ef78 MdeModulePkg/UsbBusDxe: fix NOOPT build error
  15c596aeeb OvmfPkg: Bhyve: Delete unused AcpiTables/Ssdt.asl file
  6612ff8561 UefiCpuPkg: Extend measurement of microcode patches to TPM
  e910f076ad BaseTools: Fix the bug of --cmd-len build option
  7935be0fbd IntelFsp2Pkg/FspSecCore: ExtendedImageRevision was not printed.
  c095122d4b MdeModulePkg/PciBusDxe: Enumerator to check for RCiEP before looking for RP
  d463c56ddd MdeModulePkg: Replace with UFS_UNIT_DESC to fix timeout problem
  45920941d9 MdeModulePkg: Refactoring UFS DME request and fix timing problem
  13d9e8ec98 MdeModulePkg: Put off UFS HCS.DP checking to fix timing problem
  079a58276b OvmfPkg/AmdSev/SecretPei: Mark SEV launch secret area as reserved
  9dd14fc91c MdePkg: Add registers of boot partition feature
  14a731096d UnitTestFrameworkPkg: CI YAML: Grant cmockery spell check exception
  6062002bd5 MdeModulePkg/PartitionDxe: Add break to handle invalid LBA0 in MBR
  7438a85bf1 BaseTools: Fix wrong variable header size
  c712ce2bb1 OvmfPkg/CloudHv: Add new target for Cloud Hypervisor
  a2da72b2ca OvmfPkg/CloudHv: Replace legacy 8254 PIT with local APIC timer
  6ecdda71fe OvmfPkg/CloudHv: Connect serial console
  1552050ce7 OvmfPkg/CloudHv: Remove legacy 8259 PIC support
  fdcea7ff6f OvmfPkg/CloudHv: Remove Q35 specifics
  71082d3d1b OvmfPkg/CloudHv: Reduce dependency on QemuFwCfg
  196be601f9 OvmfPkg/CloudHv: Remove video support
  7b6cbe0a81 OvmfPkg/CloudHv: Remove USB support
  e73d1bf96a OvmfPkg/CloudHv: Remove CSM support
  b66056ef21 OvmfPkg/CloudHv: add Maintainers.txt entry
  5302bd81d9 OvmfPkg: Add CloudHvX64 to the CI
  59c48c9314 UefiPayloadPkg: Change the user interface name of the Uiapp
  5801910013 UefiPayloadPkg: Not use BaseCpuTimerLib by default.
  772c5bb8dc FmpDevicePkg/FmpDxe: Update FmpDeviceCheckImageWithStatus() handling
  7709988dd8 RedfishPkg/RedfishRestExDxe:Simplify status check
  21320ef669 MdeModulePkg/Variable: Make only EFI_VARIABLE_NON_VOLATILE invalid
  7e5c603cba MdeModulePkg/SdMmcPciHcDxe: Robust improvements for SD card 1.8V switch
  ee67067f17 MdeModulePkg: VariableSmmRuntimeDxe: Fix Variable Policy Message Length
  5b39832e18 MdePkg: MmCommunication2: Update MM communicate2 function description
  ce37f45955 ArmPkg: MmCommunicationDxe: MM communicate function argument attributes
  541a077bd1 ArmPkg: MmCommunicationDxe: Update MM communicate `CommBuffer**` checks
  1aa1ec4574 ArmPkg: MmCommunicationDxe: Update MM communicate `CommSize` check
  8cc5590eab ArmPkg: MmCommunicationDxe: Update MM communicate `MessageLength` check
  6777e67383 EmbeddedPkg: Fix a build error in FwVol.c in X64 arch
  a867f3a704 UefiPayloadPkg: Use BaseCpuTimerLib for Universal Payload by default
  f4b7b473b4 MdeModulePkg/UefiBootManagerLib: Convert BmLoadOption to Variable Policy
  76b3d45b75 ShellPkg: Add the missing VariablePolicyHelperLib in ShellPkg.dsc
  8542fc5f95 NetworkPkg: Add the missing VariablePolicyHelperLib in NetworkPkg.dsc
  ae35314e7b Maintainers.txt: Add Sami Mujawar as reviewer for ArmPkg
  862ea6e836 OvmfPkg: change qemu default resolution to 1280x800
  e95b44c90e ArmVirtPkg: change qemu default resolution to 1280x800
  929804b172 OvmfPkg: add PcdVideoResolutionSource
  7f25ddbc03 OvmfPkg/QemuVideoDxe: simplify InitializeBochsGraphicsMode
  336da55ca8 OvmfPkg/QemuVideoDxe: drop QEMU_VIDEO_BOCHS_MODES-&gt;ColorDepth
  55c05427b9 OvmfPkg/QemuVideoDxe: factor out QemuVideoBochsAddMode
  49a2d8cbf5 OvmfPkg/QemuVideoDxe: parse edid blob, detect display resolution
  ba79becd55 OvmfPkg/BaseCachingPciExpressLib: Migrate BaseCachingPciExpressLib
  103fa647d1 ArmPkg: Replace CoreId and ClusterId with Mpidr in ARM_CORE_INFO struct
  742dafd2cc DynamicTablesPkg: Print specifier macro for CM_OBJECT_ID
  13136cc311 DynamicTablesPkg: FdtHwInfoParserLib: Parse Pmu info
  5751d60821 DynamicTablesPkg: AmlLib: AmlAddPrtEntry() to handle GSI
  5816bd3eab DynamicTablesPkg: AcpiSsdtPcieLibArm: Remove link device generation
  dc1118fa0d ArmVirtPkg: Add cspell exceptions
  0dbd356983 ArmVirtPkg/Kvmtool: Add DSDT ACPI table
  312ef7a0a4 ArmVirtPkg/Kvmtool: Add Configuration Manager
  17a02163bd ArmVirtPkg/Kvmtool: Enable ACPI support
  5b3c682d91 ArmVirtPkg/Kvmtool: Enable Acpiview
  017564d637 ArmPkg/ArmMmuLib AARCH64: avoid EL0 accessible mappings
  45b1612659 DynamicTablesPkg: Add Memory32Fixed function
  007a95055b DynamicTablesPkg: Remove redundant cast in AmlCodeGenReturn
  33189f0527 DynamicTablesPkg: Add AmlCodeGenMethodRetInteger function
  a4b7aa362d MdeModulePkg/Bus/Pci/PciBusDxe: Support platform PCI ROM override
  6fb09da89f ShellPkg: Fix incorrect PPTT FlagName dereference
  c09dbc92e9 BaseTools/Conf: Add new macro for customizing dll file reduction.
  d4ac53aa91 BaseTools: Fix error leg in DscBuildData.py
  f78b937c95 MdeModulePkg/RuntimeDxe: clear mVirtualMapMaxIndex
  96b8b5fd10 MdeModulePkg/UiApp: Fix spelling of 'FRONTPAGE'
  bd676f080a Maintainers.txt: add missing github IDs to OvmfPkf/Fdt reviewers
  1f54eaa725 Maintainers.txt: update email for Leif Lindholm
  b360b0b589 Maintainers.txt: Update email address
  c9b7c6e0cc BaseTools: Update CLANG{35,38}_WARNING_OVERRIDES to ignore unused vars
  42af706dfb BaseTools: Update brotli submodule
  1193aa2dfb MdeModulePkg: update brotli submodule
  85589ddbf6 OvmfPkg/VmgExitLib: Fix uninitialized variable warning with XCODE5
  c28e376edc OvmfPkg/FvbServicesSmm: use the VmgExitLibNull
  8a57673316 ShellPkg: Fix Ping GetTimerPeriod API failure
  b24306f15d NetworkPkg: Fix incorrect unicode string of the AKM/Cipher Suite
- Add amd-sev-es to the following descriptors because James Fehlig
  tested them (bsc#1196879):
    60-ovmf-x86_64.json
    60-ovmf-x86_64-2m.json
    60-ovmf-x86_64-ms.json
    60-ovmf-x86_64-2m-ms.json
- Backported patches in ovmf-bsc1196879-sev-fix.patch for fixing SEV:
    de463163d9 OvmfPkg/AmdSev: reserve snp pages
  63c50d3ff2 OvmfPkg/ResetVector: cache the SEV status MSR value in workarea
  f1d1c337e7 OvmfPkg/BaseMemEncryptLib: use the SEV_STATUS MSR value from workarea</changelog>
  <changelog author="fvogt@suse.com" date="1647345600">- TPM_ENABLE got renamed to TPM2_ENABLE and TPM_CONFIG_ENABLE removed
  (except on ARM for some reason) (boo#1197104)</changelog>
  <changelog author="jlee@suse.com" date="1651406400">- Respin amd-sev and amd-sev-es features
  After more testing, we found that not all descriptors can support
  both amd-sev with amd-sev-es. So we removed all amd-sev and amd-sev-es
  feature tags but only keep them in ovmf-x86_64-2m.json and
  60-ovmf-x86_64.json. (bsc#1198246#c75)</changelog>
  <changelog author="jlee@suse.com" date="1662465600">- Add patches to disable option ROM on sev (bsc#1199156)
  - Backported the following patches:
  - ovmf-MdeModulePkg-Update-PciEnumeratorSupport-to-ignore-O.patch
  cb8349f01a        MdeModulePkg: Update PciEnumeratorSupport to ignore OptionRom if needed
  - ovmf-OvmfPkg-IncompatiblePciDeviceSupportDxe-Ignore-Optio.patch
  c477b2783f        OvmfPkg/IncompatiblePciDeviceSupportDxe: Ignore OptionRom in Td guest
  - ovmf-OvmfPkg-IncompatiblePciDeviceSupportDxe-Refine-the-c.patch
  149ed8e421        OvmfPkg/IncompatiblePciDeviceSupportDxe: Refine the configuration
  - To disable option ROM both on tdx and sev:
  ovmf-bsc1199156-OvmfPkg-IncompatiblePciDeviceSupportDxe-Ignore-Optio.patch</changelog>
  <changelog author="jlee@suse.com" date="1665144000">- Add patches to fix detection issue of NVME controller (bsc#1203825)
  - ovmf-MdeModulePkg-NvmExpressDxe-fix-check-for-Cap.Css.patch
  - ovmf-MdeModulePkg-NvmExpressPei-fix-check-for-NVM-command.patch</changelog>
  <changelog author="jlee@suse.com" date="1681128000">- Add ovmf-Revert-OvmfPkg-OvmfXen-Set-PcdFSBClock.patch to revert
  71cdb91f313380152d7bf38cfeebe76f5b2d39ac patch (bsc#1205613)
  - 71cdb91f313380152d7bf38cfeebe76f5b2d39ac OvmfPkg/OvmfXen: Set PcdFSBClock
  - We are waiting better upsteam patch, revert the issue patch first.
    Then PcdFSBClock will back to fixed variable.
  - Reference: https://edk2.groups.io/g/devel/topic/94891128#96077
  https://bugzilla.tianocore.org/show_bug.cgi?id=4340</changelog>
  <changelog author="jlee@suse.com" date="1683979200">- Add ovmf-SecurityPkg-DxeImageVerificationLib-Check-result-of-.patch
  to check result of GetEfiGlobalVariable2 (CVE-2019-14560, bsc#1174246)</changelog>
  <changelog author="jlee@suse.com" date="1683979201">- Add ovmf-MdeModulePkg-PiSmmCore-SmmEntryPoint-underflow-CVE-2.patch
  for MdeModulePkg/PiSmmCore: SmmEntryPoint underflow (CVE-2021-38578)
  (bsc#1196741)</changelog>
</package>
<package pkgid="ec335a0d871257897a1482fa616d2e4ac8bf36f00a26b40d42f34ad989503aa5" name="perl" arch="aarch64">
  <version epoch="0" ver="5.26.1" rel="150300.17.14.1"/>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
</package>
<package pkgid="ce2e1005c3900871d2971319a0f39b8a92f30ba867918d61055e281e7a795e8f" name="perl" arch="s390x">
  <version epoch="0" ver="5.26.1" rel="150300.17.14.1"/>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
</package>
<package pkgid="66db8c25c3e38cfff28737c74942bbf1081642a87ff3e3d1f710383d960ecd1f" name="perl" arch="src">
  <version epoch="0" ver="5.26.1" rel="150300.17.14.1"/>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
</package>
<package pkgid="e5efffdc48f7b712ab9b970247b53a672d88d7825677fdee00c21f24ceeb7ada" name="perl" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.14.1"/>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
</package>
<package pkgid="9ec82c75a8b58b1bcbaacf1ec52078facbc2c968227a44a8aa62b53b5a5e1ae1" name="perl-base" arch="aarch64">
  <version epoch="0" ver="5.26.1" rel="150300.17.14.1"/>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
</package>
<package pkgid="3b2c3e247ab2adfc3bc065fad752fb25d666bec99b0d8ff9a4b5921b5fdc054a" name="perl-base" arch="s390x">
  <version epoch="0" ver="5.26.1" rel="150300.17.14.1"/>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
</package>
<package pkgid="126353136a805c38abdd0e08219c1de92bafbfaf2c6aa4b8c10422124a0e6613" name="perl-base" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.14.1"/>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
</package>
<package pkgid="bd7330c28f8c10fab8e5060701832685e6a3c165dc98073ca2639085e3586499" name="procps" arch="aarch64">
  <version epoch="0" ver="3.3.15" rel="150000.7.31.1"/>
  <changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.12-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.12-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
</package>
<package pkgid="0125cef96df0ba96a9aaec1f63707010797868128ebec4b8eb2205060c66b6e1" name="procps" arch="s390x">
  <version epoch="0" ver="3.3.15" rel="150000.7.31.1"/>
  <changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.12-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.12-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
</package>
<package pkgid="eb0377643bf652843d123fe0c49f49f2a8d036ee8d0388e133b589d8a70ec3dd" name="procps" arch="src">
  <version epoch="0" ver="3.3.15" rel="150000.7.31.1"/>
  <changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.12-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.12-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
</package>
<package pkgid="6309a13fec346626da406a3b29b9a9a49447a8099450bdf03a5f57e3812f8ab2" name="procps" arch="x86_64">
  <version epoch="0" ver="3.3.15" rel="150000.7.31.1"/>
  <changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.12-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.12-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
</package>
<package pkgid="314e53cad091bbb792bc6bac4f8d14a5947b40bf4b01f48abfb4ff57f0f15bc7" name="protobuf" arch="src">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="cee41f6d454c6f6e5b8e92c52c818366663ca274162cb21a7028d1c8025a4c34" name="python-botocore" arch="src">
  <version epoch="0" ver="1.29.89" rel="150200.37.14.1"/>
  <changelog author="dmueller@suse.com" date="1665576000">- drop remove-six.patch, rejected by upstream and breaks
  all dependent projects of botocore</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666008000">- Update to 1.27.91
  * api-change:``mediaconvert``: MediaConvert now supports specifying the minimum percentage of the
    HRD buffer available at the end of each encoded video segment.
- from version 1.27.90
  * api-change:``amplifyuibuilder``: We are releasing the ability for fields to be configured as
    arrays.
  * api-change:``appflow``: With this update, you can choose which Salesforce API is used by Amazon
    AppFlow to transfer data to or from your Salesforce account. You can choose the Salesforce REST API
    or Bulk API 2.0. You can also choose for Amazon AppFlow to pick the API automatically.
  * api-change:``connect``: This release adds support for a secondary email and a mobile number for
    Amazon Connect instance users.
  * api-change:``ds``: This release adds support for describing and updating AWS Managed Microsoft AD
    set up.
  * api-change:``ecs``: Documentation update to address tickets.
  * api-change:``guardduty``: Add UnprocessedDataSources to CreateDetectorResponse which specifies
    the data sources that couldn't be enabled during the CreateDetector request. In addition, update
    documentations.
  * api-change:``iam``: Documentation updates for the AWS Identity and Access Management API
    Reference.
  * api-change:``iotfleetwise``: Documentation update for AWS IoT FleetWise
  * api-change:``medialive``: AWS Elemental MediaLive now supports forwarding SCTE-35 messages
    through the Event Signaling and Management (ESAM) API, and can read those SCTE-35 messages from an
    inactive source.
  * api-change:``mediapackage-vod``: This release adds SPEKE v2 support for MediaPackage VOD. Speke
    v2 is an upgrade to the existing SPEKE API to support multiple encryption keys, based on an
    encryption contract selected by the customer.
  * api-change:``panorama``: Pause and resume camera stream processing with
    SignalApplicationInstanceNodeInstances. Reboot an appliance with CreateJobForDevices. More
    application state information in DescribeApplicationInstance response.
  * api-change:``rds-data``: Doc update to reflect no support for schema parameter on
    BatchExecuteStatement API
  * api-change:``ssm-incidents``: Update RelatedItem enum to support Tasks
  * api-change:``ssm``: Support of AmazonLinux2022 by Patch Manager
  * api-change:``transfer``: This release adds an option for customers to configure workflows that
    are triggered when files are only partially received from a client due to premature session
    disconnect.
  * api-change:``translate``: This release enables customers to specify multiple target languages in
    asynchronous batch translation requests.
  * api-change:``wisdom``: This release updates the GetRecommendations API to include a trigger event
    list for classifying and grouping recommendations.
- from version 1.27.89
  * api-change:``codeguru-reviewer``: Documentation update to replace broken link.
  * api-change:``elbv2``: Update elbv2 client to latest version
  * api-change:``greengrassv2``: This release adds error status details for deployments and
    components that failed on a device and adds features to improve visibility into component
    installation.
  * api-change:``quicksight``: Amazon QuickSight now supports SecretsManager Secret ARN in place of
    CredentialPair for DataSource creation and update. This release also has some minor documentation
    updates and removes CountryCode as a required parameter in GeoSpatialColumnGroup
- from version 1.27.88
  * api-change:``resiliencehub``: Documentation change for AWS Resilience Hub. Doc-only update to fix
    Documentation layout
- from version 1.27.87
  * api-change:``glue``: This SDK release adds support to sync glue jobs with source control
    provider. Additionally, a new parameter called SourceControlDetails will be added to Job model.
  * api-change:``network-firewall``: StreamExceptionPolicy configures how AWS Network Firewall
    processes traffic when a network connection breaks midstream
  * api-change:``outposts``: This release adds the Asset state information to the ListAssets
    response. The ListAssets request supports filtering on Asset state.
- from version 1.27.86
  * api-change:``connect``: Updated the CreateIntegrationAssociation API to support the CASES_DOMAIN
    IntegrationType.
  * api-change:``connectcases``: This release adds APIs for Amazon Connect Cases. Cases allows your
    agents to quickly track and manage customer issues that require multiple interactions, follow-up
    tasks, and teams in your contact center.  For more information, see
    https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
  * api-change:``ec2``: Added EnableNetworkAddressUsageMetrics flag for ModifyVpcAttribute,
    DescribeVpcAttribute APIs.
  * api-change:``ecs``: Documentation updates to address various Amazon ECS tickets.
  * api-change:``s3control``: S3 Object Lambda adds support to allow customers to intercept
    HeadObject and ListObjects requests and introduce their own compute. These requests were previously
    proxied to S3.
  * api-change:``workmail``: This release adds support for impersonation roles in Amazon WorkMail.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666267200">- Remove version constraint for python-pytest in BuildRequires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666699200">- Update to 1.28.0
  * feature:Endpoints: Implemented new endpoint ruleset system to dynamically derive endpoints and
    settings for services
  * api-change:``acm-pca``: AWS Private Certificate Authority (AWS Private CA) now offers usage modes
    which are combination of features to address specific use cases.
  * api-change:``batch``: This release adds support for AWS Batch on Amazon EKS.
  * api-change:``datasync``: Added support for self-signed certificates when using object storage
    locations; added BytesCompressed to the TaskExecution response.
  * api-change:``sagemaker``: SageMaker Inference Recommender now supports a new API
    ListInferenceRecommendationJobSteps to return the details of all the benchmark we create for an
    inference recommendation job.
- from version 1.27.96
  * api-change:``cognito-idp``: This release adds a new "DeletionProtection" field to the UserPool in
    Cognito. Application admins can configure this value with either ACTIVE or INACTIVE value. Setting
    this field to ACTIVE will prevent a user pool from accidental deletion.
  * api-change:``sagemaker``: CreateInferenceRecommenderjob API now supports passing endpoint details
    directly, that will help customers to identify the max invocation and max latency they can achieve
    for their model and the associated endpoint along with getting recommendations on other instances.
- from version 1.27.95
  * api-change:``devops-guru``: This release adds information about the resources DevOps Guru is
    analyzing.
  * api-change:``globalaccelerator``: Global Accelerator now supports AddEndpoints and
    RemoveEndpoints operations for standard endpoint groups.
  * api-change:``resiliencehub``: In this release, we are introducing support for regional
    optimization for AWS Resilience Hub applications. It also includes a few documentation updates to
    improve clarity.
  * api-change:``rum``: CloudWatch RUM now supports Extended CloudWatch Metrics with Additional
    Dimensions
- from version 1.27.94
  * api-change:``chime-sdk-messaging``: Documentation updates for Chime Messaging SDK
  * api-change:``cloudtrail``: This release includes support for exporting CloudTrail Lake query
    results to an Amazon S3 bucket.
  * api-change:``config``: This release adds resourceType enums for AppConfig, AppSync, DataSync,
    EC2, EKS, Glue, GuardDuty, SageMaker, ServiceDiscovery, SES, Route53 types.
  * api-change:``connect``: This release adds API support for managing phone numbers that can be used
    across multiple AWS regions through telephony traffic distribution.
  * api-change:``events``: Update events client to latest version
  * api-change:``managedblockchain``: Adding new Accessor APIs for Amazon Managed Blockchain
  * api-change:``s3``: Updates internal logic for constructing API endpoints. We have added
    rule-based endpoints and internal model parameters.
  * api-change:``s3control``: Updates internal logic for constructing API endpoints. We have added
    rule-based endpoints and internal model parameters.
  * api-change:``support-app``: This release adds the RegisterSlackWorkspaceForOrganization API. You
    can use the API to register a Slack workspace for an AWS account that is part of an organization.
  * api-change:``workspaces-web``: WorkSpaces Web now supports user access logging for recording
    session start, stop, and URL navigation.
- from version 1.27.93
  * api-change:``frauddetector``: Documentation Updates for Amazon Fraud Detector
  * api-change:``sagemaker``: This change allows customers to enable data capturing while running a
    batch transform job, and configure monitoring schedule to monitoring the captured data.
  * api-change:``servicediscovery``: Updated the ListNamespaces API to support the NAME and HTTP_NAME
    filters, and the BEGINS_WITH filter condition.
  * api-change:``sesv2``: This release allows subscribers to enable Dedicated IPs (managed) to send
    email via a fully managed dedicated IP experience. It also adds identities' VerificationStatus in
    the response of GetEmailIdentity and ListEmailIdentities APIs, and ImportJobs counts in the
    response of ListImportJobs API.
- from version 1.27.92
  * api-change:``greengrass``: This change allows customers to specify FunctionRuntimeOverride in
    FunctionDefinitionVersion. This configuration can be used if the runtime on the device is different
    from the AWS Lambda runtime specified for that function.
  * api-change:``sagemaker``: This release adds support for C7g, C6g, C6gd, C6gn, M6g, M6gd, R6g, and
    R6gn Graviton instance types in Amazon SageMaker Inference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667476800">- Update in SLE-15 (bsc#1204537, jsc#PED-2333)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667563200">- Update to 1.29.2
  * api-change:``memorydb``: Adding support for r6gd instances for MemoryDB Redis with data tiering.
    In a cluster with data tiering enabled, when available memory capacity is exhausted, the least
    recently used data is automatically tiered to solid state drives for cost-effective capacity
    scaling with minimal performance impact.
  * api-change:``sagemaker``: Amazon SageMaker now supports running training jobs on ml.trn1 instance
    types.
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- from version 1.29.1
  * api-change:``iotsitewise``: This release adds the ListAssetModelProperties and
    ListAssetProperties APIs. You can list all properties that belong to a single asset model or asset
    using these two new APIs.
  * api-change:``s3control``: S3 on Outposts launches support for Lifecycle configuration for
    Outposts buckets. With S3 Lifecycle configuration, you can mange objects so they are stored cost
    effectively. You can manage objects using size-based rules and specify how many noncurrent versions
    bucket will retain.
  * api-change:``sagemaker``: This release updates Framework model regex for ModelPackage to support
    new Framework version xgboost, sklearn.
  * api-change:``ssm-incidents``: Adds support for tagging replication-set on creation.
- from version 1.29.0
  * feature:Endpoints: Migrate all services to use new AWS Endpoint Resolution framework
  * Enhancement:Endpoints: Discontinued use of `sslCommonName` hosts as detailed in 1.27.0 (see
    `#2705 &lt;https://github.com/boto/botocore/issues/2705&gt;`__ for more info)
  * api-change:``rds``: Relational Database Service - This release adds support for configuring
    Storage Throughput on RDS database instances.
  * api-change:``textract``: Add ocr results in AnalyzeIDResponse as blocks
- from version 1.28.5
  * api-change:``apprunner``: This release adds support for private App Runner services. Services may
    now be configured to be made private and only accessible from a VPC. The changes include a new
    VpcIngressConnection resource and several new and modified APIs.
  * api-change:``connect``: Amazon connect now support a new API DismissUserContact to dismiss or
    remove terminated contacts in Agent CCP
  * api-change:``ec2``: Elastic IP transfer is a new Amazon VPC feature that allows you to transfer
    your Elastic IP addresses from one AWS Account to another.
  * api-change:``iot``: This release adds the Amazon Location action to IoT Rules Engine.
  * api-change:``logs``: SDK release to support tagging for destinations and log groups with
    TagResource. Also supports tag on create with PutDestination.
  * api-change:``sesv2``: This release includes support for interacting with the Virtual
    Deliverability Manager, allowing you to opt in/out of the feature and to retrieve recommendations
    and metric data.
  * api-change:``textract``: This release introduces additional support for 30+ normalized fields
    such as vendor address and currency. It also includes OCR output in the response and accuracy
    improvements for the already supported fields in previous version
- from version 1.28.4
  * api-change:``apprunner``: AWS App Runner adds .NET 6, Go 1, PHP 8.1 and Ruby 3.1 runtimes.
  * api-change:``appstream``: This release includes CertificateBasedAuthProperties in
    CreateDirectoryConfig and UpdateDirectoryConfig.
  * api-change:``cloud9``: Update to the documentation section of the Cloud9 API Reference guide.
  * api-change:``cloudformation``: This release adds more fields to improves visibility of AWS
    CloudFormation StackSets information in following APIs: ListStackInstances, DescribeStackInstance,
    ListStackSetOperationResults, ListStackSetOperations, DescribeStackSetOperation.
  * api-change:``gamesparks``: Add LATEST as a possible GameSDK Version on snapshot
  * api-change:``mediatailor``: This release introduces support for SCTE-35 segmentation descriptor
    messages which can be sent within time signal messages.
- from version 1.28.3
  * api-change:``ec2``: Feature supports the replacement of instance root volume using an updated AMI
    without requiring customers to stop their instance.
  * api-change:``fms``: Add support NetworkFirewall Managed Rule Group Override flag in
    GetViolationDetails API
  * api-change:``glue``: Added support for custom datatypes when using custom csv classifier.
  * api-change:``redshift``: This release clarifies use for the ElasticIp parameter of the
    CreateCluster and RestoreFromClusterSnapshot APIs.
  * api-change:``sagemaker``: This change allows customers to provide a custom entrypoint script for
    the docker container to be run while executing training jobs, and provide custom arguments to the
    entrypoint script.
  * api-change:``wafv2``: This release adds the following: Challenge rule action, to silently verify
    client browsers; rule group rule action override to any valid rule action, not just Count; token
    sharing between protected applications for challenge/CAPTCHA token; targeted rules option for Bot
    Control managed rule group.
- from version 1.28.2
  * api-change:``iam``: Doc only update that corrects instances of CLI not using an entity.
  * api-change:``kafka``: This release adds support for Tiered Storage. UpdateStorage allows you to
    control the Storage Mode for supported storage tiers.
  * api-change:``neptune``: Added a new cluster-level attribute to set the capacity range for Neptune
    Serverless instances.
  * api-change:``sagemaker``: Amazon SageMaker Automatic Model Tuning now supports specifying Grid
    Search strategy for tuning jobs, which evaluates all hyperparameter combinations exhaustively based
    on the categorical hyperparameters provided.
- from version 1.28.1
  * api-change:``accessanalyzer``: This release adds support for six new resource types in IAM Access
    Analyzer to help you easily identify public and cross-account access to your AWS resources. Updated
    service API, documentation, and paginators.
  * api-change:``location``: Added new map styles with satellite imagery for map resources using HERE
    as a data provider.
  * api-change:``mediatailor``: This release is a documentation update
  * api-change:``rds``: Relational Database Service - This release adds support for exporting DB
    cluster data to Amazon S3.
  * api-change:``workspaces``: This release adds new enums for supporting Workspaces Core features,
    including creating Manual running mode workspaces, importing regular Workspaces Core images and
    importing g4dn Workspaces Core images.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1668427200">- Update to 1.29.8
  * api-change:``glue``: Added links related to enabling job bookmarks.
  * api-change:``iot``: This release add new api listRelatedResourcesForAuditFinding and new member
    type IssuerCertificates for Iot device device defender Audit.
  * api-change:``license-manager``: AWS License Manager now supports onboarded Management Accounts or
    Delegated Admins to view granted licenses aggregated from all accounts in the organization.
  * api-change:``marketplace-catalog``: Added three new APIs to support tagging and tag-based
    authorization: TagResource, UntagResource, and ListTagsForResource. Added optional parameters to
    the StartChangeSet API to support tagging a resource while making a request to create it.
  * api-change:``rekognition``: Adding support for ImageProperties feature to detect dominant colors
    and image brightness, sharpness, and contrast, inclusion and exclusion filters for labels and label
    categories, new fields to the API response, "aliases" and "categories"
  * api-change:``securityhub``: Documentation updates for Security Hub
  * api-change:``ssm-incidents``: RelatedItems now have an ID field which can be used for referencing
    them else where. Introducing event references in TimelineEvent API and increasing maximum length of
    "eventData" to 12K characters.
- from version 1.29.7
  * api-change:``autoscaling``: This release adds a new price capacity optimized allocation strategy
    for Spot Instances to help customers optimize provisioning of Spot Instances via EC2 Auto Scaling,
    EC2 Fleet, and Spot Fleet. It allocates Spot Instances based on both spare capacity availability
    and Spot Instance price.
  * api-change:``ec2``: This release adds a new price capacity optimized allocation strategy for Spot
    Instances to help customers optimize provisioning of Spot Instances via EC2 Auto Scaling, EC2
    Fleet, and Spot Fleet. It allocates Spot Instances based on both spare capacity availability and
    Spot Instance price.
  * api-change:``ecs``: This release adds support for task scale-in protection with
    updateTaskProtection and getTaskProtection APIs. UpdateTaskProtection API can be used to protect a
    service managed task from being terminated by scale-in events and getTaskProtection API to get the
    scale-in protection status of a task.
  * api-change:``es``: Amazon OpenSearch Service now offers managed VPC endpoints to connect to your
    Amazon OpenSearch Service VPC-enabled domain in a Virtual Private Cloud (VPC). This feature allows
    you to privately access OpenSearch Service domain without using public IPs or requiring traffic to
    traverse the Internet.
  * api-change:``resource-explorer-2``: Text only updates to some Resource Explorer descriptions.
  * api-change:``scheduler``: AWS introduces the new Amazon EventBridge Scheduler. EventBridge
    Scheduler is a serverless scheduler that allows you to create, run, and manage tasks from one
    central, managed service.
- from version 1.29.6
  * api-change:``connect``: This release adds new fields SignInUrl, UserArn, and UserId to
    GetFederationToken response payload.
  * api-change:``connectcases``: This release adds the ability to disable templates through the
    UpdateTemplate API. Disabling templates prevents customers from creating cases using the template.
    For more information see https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
  * api-change:``ec2``: Amazon EC2 Trn1 instances, powered by AWS Trainium chips, are purpose built
    for high-performance deep learning training. u-24tb1.112xlarge and u-18tb1.112xlarge High Memory
    instances are purpose-built to run large in-memory databases.
  * api-change:``groundstation``: This release adds the preview of customer-provided ephemeris
    support for AWS Ground Station, allowing space vehicle owners to provide their own position and
    trajectory information for a satellite.
  * api-change:``mediapackage-vod``: This release adds "IncludeIframeOnlyStream" for Dash endpoints.
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- from version 1.29.5
  * api-change:``acm``: Support added for requesting elliptic curve certificate key algorithm types
    P-256 (EC_prime256v1) and P-384 (EC_secp384r1).
  * api-change:``billingconductor``: This release adds the Recurring Custom Line Item feature along
    with a new API ListCustomLineItemVersions.
  * api-change:``ec2``: This release enables sharing of EC2 Placement Groups across accounts and
    within AWS Organizations using Resource Access Manager
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
  * api-change:``fms``: AWS Firewall Manager now supports importing existing AWS Network Firewall
    firewalls into Firewall Manager policies.
  * api-change:``lightsail``: This release adds support for Amazon Lightsail to automate the
    delegation of domains registered through Amazon Route 53 to Lightsail DNS management and to
    automate record creation for DNS validation of Lightsail SSL/TLS certificates.
  * api-change:``opensearch``: Amazon OpenSearch Service now offers managed VPC endpoints to connect
    to your Amazon OpenSearch Service VPC-enabled domain in a Virtual Private Cloud (VPC). This feature
    allows you to privately access OpenSearch Service domain without using public IPs or requiring
    traffic to traverse the Internet.
  * api-change:``polly``: Amazon Polly adds new voices: Elin (sv-SE), Ida (nb-NO), Laura (nl-NL) and
    Suvi (fi-FI). They are available as neural voices only.
  * api-change:``resource-explorer-2``: This is the initial SDK release for AWS Resource Explorer.
    AWS Resource Explorer lets your users search for and discover your AWS resources across the AWS
    Regions in your account.
  * api-change:``route53``: Amazon Route 53 now supports the Europe (Zurich) Region (eu-central-2)
    for latency records, geoproximity records, and private DNS for Amazon VPCs in that region.
- from version 1.29.4
  * api-change:``athena``: Adds support for using Query Result Reuse
  * api-change:``autoscaling``: This release adds support for two new attributes for attribute-based
    instance type selection - NetworkBandwidthGbps and AllowedInstanceTypes.
  * api-change:``cloudtrail``: This release includes support for configuring a delegated
    administrator to manage an AWS Organizations organization CloudTrail trails and event data stores,
    and AWS Key Management Service encryption of CloudTrail Lake event data stores.
  * api-change:``ec2``: This release adds support for two new attributes for attribute-based instance
    type selection - NetworkBandwidthGbps and AllowedInstanceTypes.
  * api-change:``elasticache``: Added support for IPv6 and dual stack for Memcached and Redis
    clusters. Customers can now launch new Redis and Memcached clusters with IPv6 and dual stack
    networking support.
  * api-change:``lexv2-models``: Update lexv2-models client to latest version
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added support for setting the
    SDR reference white point for HDR conversions and conversion of HDR10 to DolbyVision without
    mastering metadata.
  * api-change:``ssm``: This release includes support for applying a CloudWatch alarm to multi
    account multi region Systems Manager Automation
  * api-change:``wafv2``: The geo match statement now adds labels for country and region. You can
    match requests at the region level by combining a geo match statement with label match statements.
  * api-change:``wellarchitected``: This release adds support for integrations with AWS Trusted
    Advisor and AWS Service Catalog AppRegistry to improve workload discovery and speed up your
    workload reviews.
  * api-change:``workspaces``: This release adds protocols attribute to workspaces properties data
    type. This enables customers to migrate workspaces from PC over IP (PCoIP) to WorkSpaces Streaming
    Protocol (WSP) using create and modify workspaces public APIs.
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- from version 1.29.3
  * api-change:``ec2``: This release adds API support for the recipient of an AMI account share to
    remove shared AMI launch permissions.
  * api-change:``emr-containers``: Adding support for Job templates. Job templates allow you to
    create and store templates to configure Spark applications parameters. This helps you ensure
    consistent settings across applications by reusing and enforcing configuration overrides in data
    pipelines.
  * api-change:``logs``: Doc-only update for bug fixes and support of export to buckets encrypted
    with SSE-KMS
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- Add psuffix on the name to have the multibuild flavor packages identify themselves by a different name</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669982400">- Update to 1.29.21
  * api-change:``codecatalyst``: This release adds operations that support customers using the AWS
    Toolkits and Amazon CodeCatalyst, a unified software development service that helps developers
    develop, deploy, and maintain applications in the cloud. For more information, see the
    documentation.
  * api-change:``comprehend``: Comprehend now supports semi-structured documents (such as PDF files
    or image files) as inputs for custom analysis using the synchronous APIs (ClassifyDocument and
    DetectEntities).
  * api-change:``gamelift``: GameLift introduces a new feature, GameLift Anywhere. GameLift Anywhere
    allows you to integrate your own compute resources with GameLift. You can also use GameLift
    Anywhere to iteratively test your game servers without uploading the build to GameLift for every
    iteration.
  * api-change:``pipes``: AWS introduces new Amazon EventBridge Pipes which allow you to connect
    sources (SQS, Kinesis, DDB, Kafka, MQ) to Targets (14+ EventBridge Targets) without any code, with
    filtering, batching, input transformation, and an optional Enrichment stage (Lambda, StepFunctions,
    ApiGateway, ApiDestinations)
  * api-change:``stepfunctions``: Update stepfunctions client to latest version
- from version 1.29.20
  * api-change:``accessanalyzer``: This release adds support for S3 cross account access points. IAM
    Access Analyzer will now produce public or cross account findings when it detects bucket delegation
    to external account access points.
  * api-change:``athena``: This release includes support for using Apache Spark in Amazon Athena.
  * api-change:``dataexchange``: This release enables data providers to license direct access to data
    in their Amazon S3 buckets or AWS Lake Formation data lakes through AWS Data Exchange. Subscribers
    get read-only access to the data and can use it in downstream AWS services, like Amazon Athena,
    without creating or managing copies.
  * api-change:``docdb-elastic``: Launched Amazon DocumentDB Elastic Clusters. You can now use the
    SDK to create, list, update and delete Amazon DocumentDB Elastic Cluster resources
  * api-change:``glue``: This release adds support for AWS Glue Data Quality, which helps you
    evaluate and monitor the quality of your data and includes the API for creating, deleting, or
    updating data quality rulesets, runs and evaluations.
  * api-change:``s3control``: Amazon S3 now supports cross-account access points. S3 bucket owners
    can now allow trusted AWS accounts to create access points associated with their bucket.
  * api-change:``sagemaker-geospatial``: This release provides Amazon SageMaker geospatial APIs to
    build, train, deploy and visualize geospatial models.
  * api-change:``sagemaker``: Added Models as part of the Search API. Added Model shadow deployments
    in realtime inference, and shadow testing in managed inference. Added support for shared spaces,
    geospatial APIs, Model Cards, AutoMLJobStep in pipelines, Git repositories on user profiles and
    domains, Model sharing in Jumpstart.
- from version 1.29.19
  * api-change:``ec2``: This release adds support for AWS Verified Access and the Hpc6id Amazon EC2
    compute optimized instance type, which features 3rd generation Intel Xeon Scalable processors.
  * api-change:``firehose``: Allow support for the Serverless offering for Amazon OpenSearch Service
    as a Kinesis Data Firehose delivery destination.
  * api-change:``kms``: AWS KMS introduces the External Key Store (XKS), a new feature for customers
    who want to protect their data with encryption keys stored in an external key management system
    under their control.
  * api-change:``omics``: Amazon Omics is a new, purpose-built service that can be used by healthcare
    and life science organizations to store, query, and analyze omics data. The insights from that data
    can be used to accelerate scientific discoveries and improve healthcare.
  * api-change:``opensearchserverless``: Publish SDK for Amazon OpenSearch Serverless
  * api-change:``securitylake``: Amazon Security Lake automatically centralizes security data from
    cloud, on-premises, and custom sources into a purpose-built data lake stored in your account.
    Security Lake makes it easier to analyze security data, so you can improve the protection of your
    workloads, applications, and data
  * api-change:``simspaceweaver``: AWS SimSpace Weaver is a new service that helps customers build
    spatial simulations at new levels of scale - resulting in virtual worlds with millions of dynamic
    entities. See the AWS SimSpace Weaver developer guide for more details on how to get started.
    https://docs.aws.amazon.com/simspaceweaver
- from version 1.29.18
  * api-change:``arc-zonal-shift``: Amazon Route 53 Application Recovery Controller Zonal Shift is a
    new service that makes it easy to shift traffic away from an Availability Zone in a Region. See the
    developer guide for more information:
    https://docs.aws.amazon.com/r53recovery/latest/dg/what-is-route53-recovery.html
  * api-change:``compute-optimizer``: Adds support for a new recommendation preference that makes it
    possible for customers to optimize their EC2 recommendations by utilizing an external metrics
    ingestion service to provide metrics.
  * api-change:``config``: With this release, you can use AWS Config to evaluate your resources for
    compliance with Config rules before they are created or updated. Using Config rules in proactive
    mode enables you to test and build compliant resource templates or check resource configurations at
    the time they are provisioned.
  * api-change:``ec2``: Introduces ENA Express, which uses AWS SRD and dynamic routing to increase
    throughput and minimize latency, adds support for trust relationships between Reachability Analyzer
    and AWS Organizations to enable cross-account analysis, and adds support for Infrastructure
    Performance metric subscriptions.
  * api-change:``eks``: Adds support for additional EKS add-ons metadata and filtering fields
  * api-change:``fsx``: This release adds support for 4GB/s / 160K PIOPS FSx for ONTAP file systems
    and 10GB/s / 350K PIOPS FSx for OpenZFS file systems (Single_AZ_2). For FSx for ONTAP, this also
    adds support for DP volumes, snapshot policy, copy tags to backups, and Multi-AZ route table
    updates.
  * api-change:``glue``: This release allows the creation of Custom Visual Transforms (Dynamic
    Transforms) to be created via AWS Glue CLI/SDK.
  * api-change:``inspector2``: This release adds support for Inspector to scan AWS Lambda.
  * api-change:``lambda``: Adds support for Lambda SnapStart, which helps improve the startup
    performance of functions. Customers can now manage SnapStart based functions via CreateFunction and
    UpdateFunctionConfiguration APIs
  * api-change:``license-manager-user-subscriptions``: AWS now offers fully-compliant,
    Amazon-provided licenses for Microsoft Office Professional Plus 2021 Amazon Machine Images (AMIs)
    on Amazon EC2. These AMIs are now available on the Amazon EC2 console and on AWS Marketplace to
    launch instances on-demand without any long-term licensing commitments.
  * api-change:``macie2``: Added support for configuring Macie to continually sample objects from S3
    buckets and inspect them for sensitive data. Results appear in statistics, findings, and other data
    that Macie provides.
  * api-change:``quicksight``: This release adds new Describe APIs and updates Create and Update APIs
    to support the data model for Dashboards, Analyses, and Templates.
  * api-change:``s3control``: Added two new APIs to support Amazon S3 Multi-Region Access Point
    failover controls: GetMultiRegionAccessPointRoutes and SubmitMultiRegionAccessPointRoutes. The
    failover control APIs are supported in the following Regions: us-east-1, us-west-2, eu-west-1,
    ap-southeast-2, and ap-northeast-1.
  * api-change:``securityhub``: Adding StandardsManagedBy field to DescribeStandards API response
- from version 1.29.17
  * api-change:``backup``: AWS Backup introduces support for legal hold and application stack
    backups. AWS Backup Audit Manager introduces support for cross-Region, cross-account reports.
  * api-change:``cloudwatch``: Update cloudwatch client to latest version
  * api-change:``drs``: Non breaking changes to existing APIs, and additional APIs added to support
    in-AWS failing back using AWS Elastic Disaster Recovery.
  * api-change:``ecs``: This release adds support for ECS Service Connect, a new capability that
    simplifies writing and operating resilient distributed applications. This release updates the
    TaskDefinition, Cluster, Service mutation APIs with Service connect constructs and also adds a new
    ListServicesByNamespace API.
  * api-change:``efs``: Update efs client to latest version
  * api-change:``iot-data``: This release adds support for MQTT5 properties to AWS IoT HTTP Publish
    API.
  * api-change:``iot``: Job scheduling enables the scheduled rollout of a Job with start and end
    times and a customizable end behavior when end time is reached. This is available for continuous
    and snapshot jobs. Added support for MQTT5 properties to AWS IoT TopicRule Republish Action.
  * api-change:``iotwireless``: This release includes a new feature for customers to calculate the
    position of their devices by adding three new APIs: UpdateResourcePosition, GetResourcePosition,
    and GetPositionEstimate.
  * api-change:``kendra``: Amazon Kendra now supports preview of table information from HTML tables
    in the search results. The most relevant cells with their corresponding rows, columns are displayed
    as a preview in the search result. The most relevant table cell or cells are also highlighted in
    table preview.
  * api-change:``logs``: Updates to support CloudWatch Logs data protection and CloudWatch
    cross-account observability
  * api-change:``mgn``: This release adds support for Application and Wave management. We also now
    support custom post-launch actions.
  * api-change:``oam``: Amazon CloudWatch Observability Access Manager is a new service that allows
    configuration of the CloudWatch cross-account observability feature.
  * api-change:``organizations``: This release introduces delegated administrator for AWS
    Organizations, a new feature to help you delegate the management of your Organizations policies,
    enabling you to govern your AWS organization in a decentralized way. You can now allow member
    accounts to manage Organizations policies.
  * api-change:``rds``: This release enables new Aurora and RDS feature called Blue/Green Deployments
    that makes updates to databases safer, simpler and faster.
  * api-change:``textract``: This release adds support for classifying and splitting lending
    documents by type, and extracting information by using the Analyze Lending APIs. This release also
    includes support for summarized information of the processed lending document package, in addition
    to per document results.
  * api-change:``transcribe``: This release adds support for 'inputType' for post-call and real-time
    (streaming) Call Analytics within Amazon Transcribe.
- from version 1.29.16
  * api-change:``grafana``: This release includes support for configuring a Grafana workspace to
    connect to a datasource within a VPC as well as new APIs for configuring Grafana settings.
  * api-change:``rbin``: This release adds support for Rule Lock for Recycle Bin, which allows you to
    lock retention rules so that they can no longer be modified or deleted.
- from version 1.29.15
  * bugfix:Endpoints: Resolve endpoint with default partition when no region is set
  * bugfix:s3: fixes missing x-amz-content-sha256 header for s3 object lambda
  * api-change:``appflow``: Adding support for Amazon AppFlow to transfer the data to Amazon Redshift
    databases through Amazon Redshift Data API service. This feature will support the Redshift
    destination connector on both public and private accessible Amazon Redshift Clusters and Amazon
    Redshift Serverless.
  * api-change:``kinesisanalyticsv2``: Support for Apache Flink 1.15 in Kinesis Data Analytics.
- from version 1.29.14
  * api-change:``route53``: Amazon Route 53 now supports the Asia Pacific (Hyderabad) Region
    (ap-south-2) for latency records, geoproximity records, and private DNS for Amazon VPCs in that
    region.
- from version 1.29.13
  * api-change:``appflow``: AppFlow provides a new API called UpdateConnectorRegistration to update a
    custom connector that customers have previously registered. With this API, customers no longer need
    to unregister and then register a connector to make an update.
  * api-change:``auditmanager``: This release introduces a new feature for Audit Manager: Evidence
    finder. You can now use evidence finder to quickly query your evidence, and add the matching
    evidence results to an assessment report.
  * api-change:``chime-sdk-voice``: Amazon Chime Voice Connector, Voice Connector Group and PSTN
    Audio Service APIs are now available in the Amazon Chime SDK Voice namespace. See
    https://docs.aws.amazon.com/chime-sdk/latest/dg/sdk-available-regions.html for more details.
  * api-change:``cloudfront``: CloudFront API support for staging distributions and associated
    traffic management policies.
  * api-change:``connect``: Added AllowedAccessControlTags and TagRestrictedResource for Tag Based
    Access Control on Amazon Connect Webpage
  * api-change:``dynamodb``: Updated minor fixes for DynamoDB documentation.
  * api-change:``dynamodbstreams``: Update dynamodbstreams client to latest version
  * api-change:``ec2``: This release adds support for copying an Amazon Machine Image's tags when
    copying an AMI.
  * api-change:``glue``: AWSGlue Crawler - Adding support for Table and Column level Comments with
    database level datatypes for JDBC based crawler.
  * api-change:``iot-roborunner``: AWS IoT RoboRunner is a new service that makes it easy to build
    applications that help multi-vendor robots work together seamlessly. See the IoT RoboRunner
    developer guide for more details on getting started.
    https://docs.aws.amazon.com/iotroborunner/latest/dev/iotroborunner-welcome.html
  * api-change:``quicksight``: This release adds the following: 1) Asset management for centralized
    assets governance 2) QuickSight Q now supports public embedding 3) New Termination protection flag
    to mitigate accidental deletes 4) Athena data sources now accept a custom IAM role 5) QuickSight
    supports connectivity to Databricks
  * api-change:``sagemaker``: Added DisableProfiler flag as a new field in ProfilerConfig
  * api-change:``servicecatalog``: This release 1. adds support for Principal Name Sharing with
    Service Catalog portfolio sharing. 2. Introduces repo sourced products which are created and
    managed with existing SC APIs. These products are synced to external repos and auto create new
    product versions based on changes in the repo.
  * api-change:``ssm-sap``: AWS Systems Manager for SAP provides simplified operations and management
    of SAP applications such as SAP HANA. With this release, SAP customers and partners can automate
    and simplify their SAP system administration tasks such as backup/restore of SAP HANA.
  * api-change:``stepfunctions``: Update stepfunctions client to latest version
  * api-change:``transfer``: Adds a NONE encryption algorithm type to AS2 connectors, providing
    support for skipping encryption of the AS2 message body when a HTTPS URL is also specified.
- from version 1.29.12
  * api-change:``amplify``: Adds a new value (WEB_COMPUTE) to the Platform enum that allows customers
    to create Amplify Apps with Server-Side Rendering support.
  * api-change:``appflow``: AppFlow simplifies the preparation and cataloging of SaaS data into the
    AWS Glue Data Catalog where your data can be discovered and accessed by AWS analytics and ML
    services. AppFlow now also supports data field partitioning and file size optimization to improve
    query performance and reduce cost.
  * api-change:``appsync``: This release introduces the APPSYNC_JS runtime, and adds support for
    JavaScript in AppSync functions and AppSync pipeline resolvers.
  * api-change:``dms``: Adds support for Internet Protocol Version 6 (IPv6) on DMS Replication
    Instances
  * api-change:``ec2``: This release adds a new optional parameter "privateIpAddress" for the
    CreateNatGateway API. PrivateIPAddress will allow customers to select a custom Private IPv4 address
    instead of having it be auto-assigned.
  * api-change:``elbv2``: Update elbv2 client to latest version
  * api-change:``emr-serverless``: Adds support for AWS Graviton2 based applications. You can now
    select CPU architecture when creating new applications or updating existing ones.
  * api-change:``ivschat``: Adds LoggingConfiguration APIs for IVS Chat - a feature that allows
    customers to store and record sent messages in a chat room to S3 buckets, CloudWatch logs, or
    Kinesis firehose.
  * api-change:``lambda``: Add Node 18 (nodejs18.x) support to AWS Lambda.
  * api-change:``personalize``: This release provides support for creation and use of metric
    attributions in AWS Personalize
  * api-change:``polly``: Add two new neural voices - Ola (pl-PL) and Hala (ar-AE).
  * api-change:``rum``: CloudWatch RUM now supports custom events. To use custom events, create an
    app monitor or update an app monitor with CustomEvent Status as ENABLED.
  * api-change:``s3control``: Added 34 new S3 Storage Lens metrics to support additional customer use
    cases.
  * api-change:``secretsmanager``: Documentation updates for Secrets Manager.
  * api-change:``securityhub``: Added SourceLayerArn and SourceLayerHash field for security findings.
    Updated AwsLambdaFunction Resource detail
  * api-change:``servicecatalog-appregistry``: This release adds support for tagged resource
    associations, which allows you to associate a group of resources with a defined resource tag key
    and value to the application.
  * api-change:``sts``: Documentation updates for AWS Security Token Service.
  * api-change:``textract``: This release adds support for specifying and extracting information from
    documents using the Signatures feature within Analyze Document API
  * api-change:``workspaces``: The release introduces CreateStandbyWorkspaces, an API that allows you
    to create standby WorkSpaces associated with a primary WorkSpace in another Region.
    DescribeWorkspaces now includes related WorkSpaces properties. DescribeWorkspaceBundles and
    CreateWorkspaceBundle now return more bundle details.
- from version 1.29.11
  * api-change:``batch``: Documentation updates related to Batch on EKS
  * api-change:``billingconductor``: This release adds a new feature BillingEntity pricing rule.
  * api-change:``cloudformation``: Added UnsupportedTarget HandlerErrorCode for use with CFN Resource
    Hooks
  * api-change:``comprehendmedical``: This release supports new set of entities and traits. It also
    adds new category (BEHAVIORAL_ENVIRONMENTAL_SOCIAL).
  * api-change:``connect``: This release adds a new MonitorContact API for initiating monitoring of
    ongoing Voice and Chat contacts.
  * api-change:``eks``: Adds support for customer-provided placement groups for Kubernetes control
    plane instances when creating local EKS clusters on Outposts
  * api-change:``elasticache``: for Redis now supports AWS Identity and Access Management
    authentication access to Redis clusters starting with redis-engine version 7.0
  * api-change:``iottwinmaker``: This release adds the following: 1) ExecuteQuery API allows users to
    query their AWS IoT TwinMaker Knowledge Graph 2) Pricing plan APIs allow users to configure and
    manage their pricing mode 3) Support for property groups and tabular property values in existing
    AWS IoT TwinMaker APIs.
  * api-change:``personalize-events``: This release provides support for creation and use of metric
    attributions in AWS Personalize
  * api-change:``proton``: Add support for sorting and filtering in ListServiceInstances
  * api-change:``rds``: This release adds support for container databases (CDBs) to Amazon RDS Custom
    for Oracle. A CDB contains one PDB at creation. You can add more PDBs using Oracle SQL. You can
    also customize your database installation by setting the Oracle base, Oracle home, and the OS user
    name and group.
  * api-change:``ssm-incidents``: Add support for PagerDuty integrations on ResponsePlan,
    IncidentRecord, and RelatedItem APIs
  * api-change:``ssm``: This release adds support for cross account access in CreateOpsItem,
    UpdateOpsItem and GetOpsItem. It introduces new APIs to setup resource policies for SSM resources:
    PutResourcePolicy, GetResourcePolicies and DeleteResourcePolicy.
  * api-change:``transfer``: Allow additional operations to throw ThrottlingException
  * api-change:``xray``: This release adds new APIs - PutResourcePolicy, DeleteResourcePolicy,
    ListResourcePolicies for supporting resource based policies for AWS X-Ray.
- from version 1.29.10
  * bugfix:s3: fixes missing x-amz-content-sha256 header for s3 on outpost
  * enhancement:sso: Add support for loading sso-session profiles from the aws config
  * api-change:``connect``: This release updates the APIs: UpdateInstanceAttribute,
    DescribeInstanceAttribute, and ListInstanceAttributes. You can use it to programmatically
    enable/disable enhanced contact monitoring using attribute type ENHANCED_CONTACT_MONITORING on the
    specified Amazon Connect instance.
  * api-change:``greengrassv2``: Adds new parent target ARN paramater to CreateDeployment,
    GetDeployment, and ListDeployments APIs for the new subdeployments feature.
  * api-change:``route53``: Amazon Route 53 now supports the Europe (Spain) Region (eu-south-2) for
    latency records, geoproximity records, and private DNS for Amazon VPCs in that region.
  * api-change:``workspaces``: This release introduces ModifyCertificateBasedAuthProperties, a new
    API that allows control of certificate-based auth properties associated with a WorkSpaces
    directory. The DescribeWorkspaceDirectories API will now additionally return certificate-based auth
    properties in its responses.
- from version 1.29.9
  * api-change:``customer-profiles``: This release enhances the SearchProfiles API by providing
    functionality to search for profiles using multiple keys and logical operators.
  * api-change:``lakeformation``: This release adds a new parameter "Parameters" in the
    DataLakeSettings.
  * api-change:``managedblockchain``: Updating the API docs data type: NetworkEthereumAttributes, and
    the operations DeleteNode, and CreateNode to also include the supported Goerli network.
  * api-change:``proton``: Add support for CodeBuild Provisioning
  * api-change:``rds``: This release adds support for restoring an RDS Multi-AZ DB cluster snapshot
    to a Single-AZ deployment or a Multi-AZ DB instance deployment.
  * api-change:``workdocs``: Added 2 new document related operations, DeleteDocumentVersion and
    RestoreDocumentVersions.
  * api-change:``xray``: This release enhances GetServiceGraph API to support new type of edge to
    represent links between SQS and Lambda in event-driven applications.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1670587200">- Update to 1.29.26
  * enhancement:Endpoint Provider Standard Library: Correct spelling of 'library' in
    ``StandardLibrary`` class
  * api-change:``autoscaling``: Adds support for metric math for target tracking scaling policies,
    saving you the cost and effort of publishing a custom metric to CloudWatch. Also adds support for
    VPC Lattice by adding the Attach/Detach/DescribeTrafficSources APIs and a new health check type to
    the CreateAutoScalingGroup API.
  * api-change:``iottwinmaker``: This release adds the following new features: 1) New APIs for
    managing a continuous sync of assets and asset models from AWS IoT SiteWise. 2) Support user
    friendly names for component types (ComponentTypeName) and properties (DisplayName).
  * api-change:``migrationhubstrategy``: This release adds known application filtering, server
    selection for assessments, support for potential recommendations, and indications for configuration
    and assessment status. For more information, see the AWS Migration Hub documentation at
    https://docs.aws.amazon.com/migrationhub/index.html
- from version 1.29.25
  * api-change:``ce``: This release adds the LinkedAccountName field to the GetAnomalies API response
    under RootCause
  * api-change:``cloudfront``: Introducing UpdateDistributionWithStagingConfig that can be used to
    promote the staging configuration to the production.
  * api-change:``eks``: Adds support for EKS add-ons configurationValues fields and
    DescribeAddonConfiguration function
  * api-change:``kms``: Updated examples and exceptions for External Key Store (XKS).
- from version 1.29.24
  * api-change:``billingconductor``: This release adds the Tiering Pricing Rule feature.
  * api-change:``connect``: This release provides APIs that enable you to programmatically manage
    rules for Contact Lens conversational analytics and third party applications. For more information,
    see   https://docs.aws.amazon.com/connect/latest/APIReference/rules-api.html
  * api-change:``dynamodb``: Endpoint Ruleset update: Use http instead of https for the "local"
    region.
  * api-change:``dynamodbstreams``: Update dynamodbstreams client to latest version
  * api-change:``rds``: This release adds the BlueGreenDeploymentNotFoundFault to the
    AddTagsToResource, ListTagsForResource, and RemoveTagsFromResource operations.
  * api-change:``sagemaker-featurestore-runtime``: For online + offline Feature Groups, added ability
    to target PutRecord and DeleteRecord actions to only online store, or only offline store. If target
    store parameter is not specified, actions will apply to both stores.
- from version 1.29.23
  * api-change:``ce``: This release introduces two new APIs that offer a 1-click experience to
    refresh Savings Plans recommendations. The two APIs are
    StartSavingsPlansPurchaseRecommendationGeneration and
    ListSavingsPlansPurchaseRecommendationGeneration.
  * api-change:``ec2``: Documentation updates for EC2.
  * api-change:``ivschat``: Adds PendingVerification error type to messaging APIs to block the
    resource usage for accounts identified as being fraudulent.
  * api-change:``rds``: This release adds the InvalidDBInstanceStateFault to the
    RestoreDBClusterFromSnapshot operation.
  * api-change:``transcribe``: Amazon Transcribe now supports creating custom language models in the
    following languages: Japanese (ja-JP) and German (de-DE).
- from version 1.29.22
  * api-change:``appsync``: Fixes the URI for the evaluatecode endpoint to include the /v1 prefix
    (ie. "/v1/dataplane-evaluatecode").
  * api-change:``ecs``: Documentation updates for Amazon ECS
  * api-change:``fms``: AWS Firewall Manager now supports Fortigate Cloud Native Firewall as a
    Service as a third-party policy type.
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added support for
    configurable ID3 eMSG box attributes and the ability to signal them with InbandEventStream tags in
    DASH and CMAF outputs.
  * api-change:``medialive``: Updates to Event Signaling and Management (ESAM) API and documentation.
  * api-change:``polly``: Add language code for Finnish (fi-FI)
  * api-change:``proton``: CreateEnvironmentAccountConnection RoleArn input is now optional
  * api-change:``redshift-serverless``: Add Table Level Restore operations for Amazon Redshift
    Serverless. Add multi-port support for Amazon Redshift Serverless endpoints. Add Tagging support to
    Snapshots and Recovery Points in Amazon Redshift Serverless.
  * api-change:``sns``: This release adds the message payload-filtering feature to the SNS Subscribe,
    SetSubscriptionAttributes, and GetSubscriptionAttributes API actions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1672660800">- Update to 1.29.41
  * api-change:``cloudfront``: Extend response headers policy to support removing headers from viewer
    responses
  * api-change:``iotfleetwise``: Update documentation - correct the epoch constant value of default
    value for expiryTime field in CreateCampaign request.
- from version 1.29.40
  * api-change:``apigateway``: Documentation updates for Amazon API Gateway
  * api-change:``emr``: Update emr client to latest version
  * api-change:``secretsmanager``: Added owning service filter, include planned deletion flag, and
    next rotation date response parameter in ListSecrets.
  * api-change:``wisdom``: This release extends Wisdom CreateContent and StartContentUpload APIs to
    support PDF and MicrosoftWord docx document uploading.
- from version 1.29.39
  * api-change:``elasticache``: This release allows you to modify the encryption in transit setting,
    for existing Redis clusters. You can now change the TLS configuration of your Redis clusters
    without the need to re-build or re-provision the clusters or impact application availability.
  * api-change:``network-firewall``: AWS Network Firewall now provides status messages for firewalls
    to help you troubleshoot when your endpoint fails.
  * api-change:``rds``: This release adds support for Custom Engine Version (CEV) on RDS Custom SQL
    Server.
  * api-change:``route53-recovery-control-config``: Added support for Python paginators in the
    route53-recovery-control-config List* APIs.
- from version 1.29.38
  * api-change:``memorydb``: This release adds support for MemoryDB Reserved nodes which provides a
    significant discount compared to on-demand node pricing. Reserved nodes are not physical nodes, but
    rather a billing discount applied to the use of on-demand nodes in your account.
  * api-change:``transfer``: Add additional operations to throw ThrottlingExceptions
- from version 1.29.37
  * api-change:``connect``: Support for Routing Profile filter, SortCriteria, and grouping by Routing
    Profiles for GetCurrentMetricData API. Support for RoutingProfiles, UserHierarchyGroups, and Agents
    as filters, NextStatus and AgentStatusName for GetCurrentUserData. Adds ApproximateTotalCount to
    both APIs.
  * api-change:``connectparticipant``: Amazon Connect Chat introduces the Message Receipts feature.
    This feature allows agents and customers to receive message delivered and read receipts after they
    send a chat message.
  * api-change:``detective``: This release adds a missed AccessDeniedException type to several
    endpoints.
  * api-change:``fsx``: Fix a bug where a recent release might break certain existing SDKs.
  * api-change:``inspector2``: Amazon Inspector adds support for scanning NodeJS 18.x and Go 1.x AWS
    Lambda function runtimes.
- from version 1.29.36
  * api-change:``compute-optimizer``: This release enables AWS Compute Optimizer to analyze and
    generate optimization recommendations for ecs services running on Fargate.
  * api-change:``connect``: Amazon Connect Chat introduces the Idle Participant/Autodisconnect
    feature, which allows users to set timeouts relating to the activity of chat participants, using
    the new UpdateParticipantRoleConfig API.
  * api-change:``iotdeviceadvisor``: This release adds the following new features: 1) Documentation
    updates for IoT Device Advisor APIs. 2) Updated required request parameters for IoT Device Advisor
    APIs. 3) Added new service feature: ability to provide the test endpoint when customer executing
    the StartSuiteRun API.
  * api-change:``kinesis-video-webrtc-storage``: Amazon Kinesis Video Streams offers capabilities to
    stream video and audio in real-time via WebRTC to the cloud for storage, playback, and analytical
    processing. Customers can use our enhanced WebRTC SDK and cloud APIs to enable real-time streaming,
    as well as media ingestion to the cloud.
  * api-change:``rds``: Add support for managing master user password in AWS Secrets Manager for the
    DBInstance and DBCluster.
  * api-change:``secretsmanager``: Documentation updates for Secrets Manager
- from version 1.29.35
  * api-change:``connect``: Amazon Connect Chat now allows for JSON (application/json) message types
    to be sent as part of the initial message in the StartChatContact API.
  * api-change:``connectparticipant``: Amazon Connect Chat now allows for JSON (application/json)
    message types to be sent in the SendMessage API.
  * api-change:``license-manager-linux-subscriptions``: AWS License Manager now offers cross-region,
    cross-account tracking of commercial Linux subscriptions on AWS. This includes subscriptions
    purchased as part of EC2 subscription-included AMIs, on the AWS Marketplace, or brought to AWS via
    Red Hat Cloud Access Program.
  * api-change:``macie2``: This release adds support for analyzing Amazon S3 objects that use the S3
    Glacier Instant Retrieval (Glacier_IR) storage class.
  * api-change:``sagemaker``: This release enables adding RStudio Workbench support to an existing
    Amazon SageMaker Studio domain. It allows setting your RStudio on SageMaker environment
    configuration parameters and also updating the RStudioConnectUrl and RStudioPackageManagerUrl
    parameters for existing domains
  * api-change:``scheduler``: Updated the ListSchedules and ListScheduleGroups APIs to allow the
    NamePrefix field to start with a number. Updated the validation for executionRole field to support
    any role name.
  * api-change:``ssm``: Doc-only updates for December 2022.
  * api-change:``support``: Documentation updates for the AWS Support API
  * api-change:``transfer``: This release adds support for Decrypt as a workflow step type.
- from version 1.29.34
  * api-change:``batch``: Adds isCancelled and isTerminated to DescribeJobs response.
  * api-change:``ec2``: Adds support for pagination in the EC2 DescribeImages API.
  * api-change:``lookoutequipment``: This release adds support for listing inference schedulers by
    status.
  * api-change:``medialive``: This release adds support for two new features to AWS Elemental
    MediaLive. First, you can now burn-in timecodes to your MediaLive outputs. Second, we now now
    support the ability to decode Dolby E audio when it comes in on an input.
  * api-change:``nimble``: Amazon Nimble Studio now supports configuring session storage volumes and
    persistence, as well as backup and restore sessions through launch profiles.
  * api-change:``resource-explorer-2``: Documentation updates for AWS Resource Explorer.
  * api-change:``route53domains``: Use Route 53 domain APIs to change owner, create/delete DS record,
    modify IPS tag, resend authorization. New: AssociateDelegationSignerToDomain,
    DisassociateDelegationSignerFromDomain, PushDomain, ResendOperationAuthorization. Updated:
    UpdateDomainContact, ListOperations, CheckDomainTransferability.
  * api-change:``sagemaker``: Amazon SageMaker Autopilot adds support for new objective metrics in
    CreateAutoMLJob API.
  * api-change:``transcribe``: Enable our batch transcription jobs for Swedish and Vietnamese.
- from version 1.29.33
  * api-change:``athena``: Add missed InvalidRequestException in
    GetCalculationExecutionCode,StopCalculationExecution APIs. Correct required parameters (Payload and
    Type) in UpdateNotebook API. Change Notebook size from 15 Mb to 10 Mb.
  * api-change:``ecs``: This release adds support for alarm-based rollbacks in ECS, a new feature
    that allows customers to add automated safeguards for Amazon ECS service rolling updates.
  * api-change:``kinesis-video-webrtc-storage``: Amazon Kinesis Video Streams offers capabilities to
    stream video and audio in real-time via WebRTC to the cloud for storage, playback, and analytical
    processing. Customers can use our enhanced WebRTC SDK and cloud APIs to enable real-time streaming,
    as well as media ingestion to the cloud.
  * api-change:``kinesisvideo``: Amazon Kinesis Video Streams offers capabilities to stream video and
    audio in real-time via WebRTC to the cloud for storage, playback, and analytical processing.
    Customers can use our enhanced WebRTC SDK and cloud APIs to enable real-time streaming, as well as
    media ingestion to the cloud.
  * api-change:``rds``: Add support for --enable-customer-owned-ip to RDS
    create-db-instance-read-replica API for RDS on Outposts.
  * api-change:``sagemaker``: AWS Sagemaker - Sagemaker Images now supports Aliases as secondary
    identifiers for ImageVersions. SageMaker Images now supports additional metadata for ImageVersions
    for better images management.
- from version 1.29.32
  * api-change:``appflow``: This release updates the ListConnectorEntities API action so that it
    returns paginated responses that customers can retrieve with next tokens.
  * api-change:``cloudfront``: Updated documentation for CloudFront
  * api-change:``datasync``: AWS DataSync now supports the use of tags with task executions. With
    this new feature, you can apply tags each time you execute a task, giving you greater control and
    management over your task executions.
  * api-change:``efs``: Update efs client to latest version
  * api-change:``guardduty``: This release provides the valid characters for the Description and Name
    field.
  * api-change:``iotfleetwise``: Updated error handling for empty resource names in
    "UpdateSignalCatalog" and "GetModelManifest" operations.
  * api-change:``sagemaker``: AWS sagemaker - Features: This release adds support for random seed,
    it's an integer value used to initialize a pseudo-random number generator. Setting a random seed
    will allow the hyperparameter tuning search strategies to produce more consistent configurations
    for the same tuning job.
- from version 1.29.31
  * api-change:``backup-gateway``: This release adds support for VMware vSphere tags, enabling
    customer to protect VMware virtual machines using tag-based policies for AWS tags mapped from
    vSphere tags. This release also adds support for customer-accessible gateway-hypervisor interaction
    log and upload bandwidth rate limit schedule.
  * api-change:``connect``: Added support for "English - New Zealand" and "English - South African"
    to be used with Amazon Connect Custom Vocabulary APIs.
  * api-change:``ecs``: This release adds support for container port ranges in ECS, a new capability
    that allows customers to provide container port ranges to simplify use cases where multiple ports
    are in use in a container. This release updates TaskDefinition mutation APIs and the Task
    description APIs.
  * api-change:``eks``: Add support for Windows managed nodes groups.
  * api-change:``glue``: This release adds support for AWS Glue Crawler with native DeltaLake tables,
    allowing Crawlers to classify Delta Lake format tables and catalog them for query engines to query
    against.
  * api-change:``kinesis``: Added StreamARN parameter for Kinesis Data Streams APIs. Added a new
    opaque pagination token for ListStreams. SDKs will auto-generate Account Endpoint when accessing
    Kinesis Data Streams.
  * api-change:``location``: This release adds support for a new style, "VectorOpenDataStandardLight"
    which can be used with the new data source, "Open Data Maps (Preview)".
  * api-change:``m2``: Adds an optional create-only `KmsKeyId` property to Environment and
    Application resources.
  * api-change:``sagemaker``: SageMaker Inference Recommender now allows customers to load tests
    their models on various instance types using private VPC.
  * api-change:``securityhub``: Added new resource details objects to ASFF, including resources for
    AwsEc2LaunchTemplate, AwsSageMakerNotebookInstance, AwsWafv2WebAcl and AwsWafv2RuleGroup.
  * api-change:``translate``: Raised the input byte size limit of the Text field in the TranslateText
    API to 10000 bytes.
- from version 1.29.30
  * api-change:``ce``: This release supports percentage-based thresholds on Cost Anomaly Detection
    alert subscriptions.
  * api-change:``cloudwatch``: Update cloudwatch client to latest version
  * api-change:``networkmanager``: Appliance Mode support for AWS Cloud WAN.
  * api-change:``redshift-data``: This release adds a new --client-token field to ExecuteStatement
    and BatchExecuteStatement operations. Customers can now run queries with the additional client
    token parameter to ensures idempotency.
  * api-change:``sagemaker-metrics``: Update SageMaker Metrics documentation.
- from version 1.29.29
  * api-change:``cloudtrail``: Merging mainline branch for service model into mainline release
    branch. There are no new APIs.
  * api-change:``rds``: This deployment adds ClientPasswordAuthType field to the Auth structure of
    the DBProxy.
- from version 1.29.28
  * bugfix:Endpoint provider: Updates ARN parsing ``resourceId`` delimiters
  * api-change:``customer-profiles``: This release allows custom strings in PartyType and Gender
    through 2 new attributes in the CreateProfile and UpdateProfile APIs: PartyTypeString and
    GenderString.
  * api-change:``ec2``: This release updates DescribeFpgaImages to show supported instance types of
    AFIs in its response.
  * api-change:``kinesisvideo``: This release adds support for public preview of Kinesis Video Stream
    at Edge enabling customers to provide configuration for the Kinesis Video Stream EdgeAgent running
    on an on-premise IoT device. Customers can now locally record from cameras and stream videos to the
    cloud on configured schedule.
  * api-change:``lookoutvision``: This documentation update adds kms:GenerateDataKey as a required
    permission to StartModelPackagingJob.
  * api-change:``migration-hub-refactor-spaces``: This release adds support for Lambda alias service
    endpoints. Lambda alias ARNs can now be passed into CreateService.
  * api-change:``rds``: Update the RDS API model to support copying option groups during the
    CopyDBSnapshot operation
  * api-change:``rekognition``: Adds support for "aliases" and "categories", inclusion and exclusion
    filters for labels and label categories, and aggregating labels by video segment timestamps for
    Stored Video Label Detection APIs.
  * api-change:``sagemaker-metrics``: This release introduces support SageMaker Metrics APIs.
  * api-change:``wafv2``: Documents the naming requirement for logging destinations that you use with
    web ACLs.
- from version 1.29.27
  * api-change:``iotfleetwise``: Deprecated assignedValue property for actuators and attributes.
    Added a message to invalid nodes and invalid decoder manifest exceptions.
  * api-change:``logs``: Doc-only update for CloudWatch Logs, for Tagging Permissions clarifications
  * api-change:``medialive``: Link devices now support buffer size (latency) configuration. A higher
    latency value means a longer delay in transmitting from the device to MediaLive, but improved
    resiliency. A lower latency value means a shorter delay, but less resiliency.
  * api-change:``mediapackage-vod``: This release provides the approximate number of assets in a
    packaging group.</changelog>
  <changelog author="dmueller@suse.com" date="1673265600">- correct requires
- update to 1.29.45:
  * api-change:``acm-pca``: Added revocation parameter validation: bucket names
    must match S3 bucket naming rules and CNAMEs conform to RFC2396 restrictions
    on the use of special characters in URIs.
  * api-change:``auditmanager``: This release introduces a new data retention
    option in your Audit Manager settings. You can now use the
    DeregistrationPolicy parameter to specify if you want to delete your data
    when you deregister Audit Manager.
  * api-change:``amplifybackend``: Updated GetBackendAPIModels response to
    include ModelIntrospectionSchema json string
  * api-change:``apprunner``: This release adds support of securely referencing
    secrets and configuration data that are stored in Secrets Manager and SSM
    Parameter Store by adding them as environment secrets in your App Runner
    service.
  * api-change:``connect``: Documentation update for a new Initiation Method
    value in DescribeContact API
  * api-change:``emr-serverless``: Adds support for customized images. You can
    now provide runtime images when creating or updating EMR Serverless
    Applications.
  * api-change:``lightsail``: Documentation updates for Amazon Lightsail.
  * api-change:``mwaa``: MWAA supports Apache Airflow version 2.4.3.
  * api-change:``rds``: This release adds support for specifying which
    certificate authority (CA) to use for a DB instance's server certificate
    during DB instance creation, as well as other CA enhancements.
  * api-change:``application-autoscaling``: Customers can now use the existing
    DescribeScalingActivities API to also see the detailed and machine-readable
    reasons for Application Auto Scaling not scaling their resources and, if
    needed, take the necessary corrective actions.
  * api-change:``logs``: Update to remove sequenceToken as a required field in
    PutLogEvents calls.
  * api-change:``ssm``: Adding support for QuickSetup Document Type in Systems
    Manager
  * api-change:``securitylake``: Allow CreateSubscriber API to take string input
    that allows setting more descriptive SubscriberDescription field. Make
    souceTypes field required in model level for UpdateSubscriberRequest as it is
    required for every API call on the backend. Allow ListSubscribers take any
    String as nextToken param.</changelog>
  <changelog author="dmueller@suse.com" date="1673870400">- update to 1.29.50:
  * api-change:``connect``: This release updates the responses of
    UpdateContactFlowContent, UpdateContactFlowMetadata, UpdateContactFlowName
    and DeleteContactFlow API with empty responses.
  * api-change:``ec2``: Documentation updates for EC2.
  * api-change:``outposts``: This release adds POWER_30_KVA as an option for
    PowerDrawKva. PowerDrawKva is part of the RackPhysicalProperties structure
    in the CreateSite request.
  * api-change:``resource-groups``: AWS Resource Groups customers can now turn
    on Group Lifecycle Events in their AWS account. When you turn this on,
    Resource Groups monitors your groups for changes to group state or
    membership. Those changes are sent to Amazon EventBridge as events that you
    can respond to using rules you create.
  * api-change:``cleanrooms``: Initial release of AWS Clean Rooms
  * api-change:``lambda``: Add support for MaximumConcurrency parameter for SQS
    event source. Customers can now limit the maximum concurrent invocations
    for their SQS Event Source Mapping.
  * api-change:``logs``: Bug fix: logGroupName is now not a required field in
    GetLogEvents, FilterLogEvents, GetLogGroupFields, and DescribeLogStreams
    APIs as logGroupIdentifier can be provided instead
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added
    support for compact DASH manifest generation, audio normalization using
    TruePeak measurements, and the ability to clip the sample range in the
    color corrector.
  * api-change:``secretsmanager``: Update documentation for new ListSecrets and DescribeSecret parameters
  * api-change:``kendra``: This release adds support to new document types -
    RTF, XML, XSLT, MS_EXCEL, CSV, JSON, MD
  * api-change:``location``: This release adds support for two new route travel
    models, Bicycle and Motorcycle which can be used with Grab data source.
  * api-change:``rds``: This release adds support for configuring allocated
    storage on the CreateDBInstanceReadReplica,
    RestoreDBInstanceFromDBSnapshot, and RestoreDBInstanceToPointInTime APIs.
  * api-change:``ecr-public``: This release for Amazon ECR Public makes several
    change to bring the SDK into sync with the API.
  * api-change:``kendra-ranking``: Introducing Amazon Kendra Intelligent
    Ranking, a new set of Kendra APIs that leverages Kendra semantic ranking
    capabilities to improve the quality of search results from other search
    services (i.e. OpenSearch, ElasticSearch, Solr).
  * api-change:``network-firewall``: Network Firewall now supports the Suricata
    rule action reject, in addition to the actions pass, drop, and alert.
  * api-change:``ram``: Enabled FIPS aws-us-gov endpoints in SDK.
  * api-change:``workspaces-web``: This release adds support for a new portal
    authentication type: AWS IAM Identity Center (successor to AWS Single
    Sign-On).</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674129600">- Update to 1.29.52
  * api-change:``cloudwatch``: Update cloudwatch client to latest version
  * api-change:``efs``: Update efs client to latest version
  * api-change:``ivschat``: Updates the range for a Chat Room's maximumMessageRatePerSecond field.
  * api-change:``wafv2``: Improved the visibility of the guidance for updating AWS WAF resources,
    such as web ACLs and rule groups.
- from version 1.29.51
  * api-change:``billingconductor``: This release adds support for SKU Scope for pricing plans.
  * api-change:``cloud9``: Added minimum value to AutomaticStopTimeMinutes parameter.
  * api-change:``imagebuilder``: Add support for AWS Marketplace product IDs as input during
    CreateImageRecipe for the parent-image parameter. Add support for listing third-party components.
  * api-change:``network-firewall``: Network Firewall now allows creation of dual stack endpoints,
    enabling inspection of IPv6 traffic.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674820800">- Update to 1.29.58
  * api-change:``events``: Update events client to latest version
  * api-change:``iotfleetwise``: Add model validation to BatchCreateVehicle and BatchUpdateVehicle
    operations that invalidate requests with an empty vehicles list.
  * api-change:``s3``: Allow FIPS to be used with path-style URLs.
- from version 1.29.57
  * api-change:``cloudformation``: Enabled FIPS aws-us-gov endpoints in SDK.
  * api-change:``ec2``: This release adds new functionality that allows customers to provision IPv6
    CIDR blocks through Amazon VPC IP Address Manager (IPAM) as well as allowing customers to utilize
    IPAM Resource Discovery APIs.
  * api-change:``m2``: Add returnCode, batchJobIdentifier in GetBatchJobExecution response, for user
    to view the batch job execution result &amp; unique identifier from engine. Also removed unused headers
    from REST APIs
  * api-change:``polly``: Add 5 new neural voices - Sergio (es-ES), Andres (es-MX), Remi (fr-FR),
    Adriano (it-IT) and Thiago (pt-BR).
  * api-change:``redshift-serverless``: Added query monitoring rules as possible parameters for
    create and update workgroup operations.
  * api-change:``s3control``: Add additional endpoint tests for S3 Control. Fix missing endpoint
    parameters for PutBucketVersioning and GetBucketVersioning. Prior to this fix, those operations may
    have resulted in an invalid endpoint being resolved.
  * api-change:``sagemaker``: SageMaker Inference Recommender now decouples from Model Registry and
    could accept Model Name to invoke inference recommendations job; Inference Recommender now provides
    CPU/Memory Utilization metrics data in recommendation output.
  * api-change:``sts``: Doc only change to update wording in a key topic
- from version 1.29.56
  * api-change:``databrew``: Enabled FIPS us-gov-west-1 endpoints in SDK.
  * api-change:``route53``: Amazon Route 53 now supports the Asia Pacific (Melbourne) Region
    (ap-southeast-4) for latency records, geoproximity records, and private DNS for Amazon VPCs in that
    region.
  * api-change:``ssm-sap``: This release provides updates to documentation and support for listing
    operations performed by AWS Systems Manager for SAP.
- from version 1.29.55
  * api-change:``lambda``: Release Lambda RuntimeManagementConfig, enabling customers to better
    manage runtime updates to their Lambda functions. This release adds two new APIs,
    GetRuntimeManagementConfig and PutRuntimeManagementConfig, as well as support on existing
    Create/Get/Update function APIs.
  * api-change:``sagemaker``: Amazon SageMaker Inference now supports P4de instance types.
- from version 1.29.54
  * api-change:``ec2``: C6in, M6in, M6idn, R6in and R6idn instances are powered by 3rd Generation
    Intel Xeon Scalable processors (code named Ice Lake) with an all-core turbo frequency of 3.5 GHz.
  * api-change:``ivs``: API and Doc update. Update to arns field in BatchGetStreamKey. Also updates
    to operations and structures.
  * api-change:``quicksight``: This release adds support for data bars in QuickSight table and
    increases pivot table field well limit.
- from version 1.29.53
  * api-change:``appflow``: Adding support for Salesforce Pardot connector in Amazon AppFlow.
  * api-change:``codeartifact``: Documentation updates for CodeArtifact
  * api-change:``connect``: Amazon Connect Chat introduces Persistent Chat, allowing customers to
    resume previous conversations with context and transcripts carried over from previous chats,
    eliminating the need to repeat themselves and allowing agents to provide personalized service with
    access to entire conversation history.
  * api-change:``connectparticipant``: This release updates Amazon Connect Participant's
    GetTranscript api to provide transcripts of past chats on a persistent chat session.
  * api-change:``ec2``: Adds SSM Parameter Resource Aliasing support to EC2 Launch Templates. Launch
    Templates can now store parameter aliases in place of AMI Resource IDs. CreateLaunchTemplateVersion
    and DescribeLaunchTemplateVersions now support a convenience flag, ResolveAlias, to return the
    resolved parameter value.
  * api-change:``glue``: Release Glue Studio Hudi Data Lake Format for SDK/CLI
  * api-change:``groundstation``: Add configurable prepass and postpass times for
    DataflowEndpointGroup. Add Waiter to allow customers to wait for a contact that was reserved
    through ReserveContact
  * api-change:``logs``: Bug fix - Removed the regex pattern validation from CoralModel to avoid
    potential security issue.
  * api-change:``medialive``: AWS Elemental MediaLive adds support for SCTE 35 preRollMilliSeconds.
  * api-change:``opensearch``: This release adds the enhanced dry run option, that checks for
    validation errors that might occur when deploying configuration changes and provides a summary of
    these errors, if any. The feature will also indicate whether a blue/green deployment will be
    required to apply a change.
  * api-change:``panorama``: Added AllowMajorVersionUpdate option to OTAJobConfig to make appliance
    software major version updates opt-in.
  * api-change:``sagemaker``: HyperParameterTuningJobs now allow passing environment variables into
    the corresponding TrainingJobs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675166400">- Update to 1.29.60
  * api-change:``clouddirectory``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``cloudformation``: This feature provides a method of obtaining which regions a
    stackset has stack instances deployed in.
  * api-change:``discovery``: Update ImportName validation to 255 from the current length of 100
  * api-change:``dlm``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``ec2``: We add Prefix Lists as a new route destination option for LocalGatewayRoutes.
    This will allow customers to create routes to Prefix Lists. Prefix List routes will allow customers
    to group individual CIDR routes with the same target into a single route.
  * api-change:``imagebuilder``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``kafka``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``mediaconvert``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``swf``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
- from version 1.29.59
  * api-change:``application-autoscaling``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``appstream``: Fixing the issue where Appstream waiters hang for fleet_started and
    fleet_stopped.
  * api-change:``elasticbeanstalk``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``fis``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``glacier``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``greengrass``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``greengrassv2``: Enabled FIPS endpoints for GovCloud (US) in SDK.
  * api-change:``mediatailor``: This release introduces the As Run logging type, along with API and
    documentation updates.
  * api-change:``outposts``: Adding support for payment term in GetOrder, CreateOrder responses.
  * api-change:``sagemaker-runtime``: Update sagemaker-runtime client to latest version
  * api-change:``sagemaker``: This release supports running SageMaker Training jobs with container
    images that are in a private Docker registry.
  * api-change:``serverlessrepo``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675857600">- Update to 1.29.66
  * api-change:``transfer``: Updated the documentation for the ImportCertificate API call, and added
    examples.
- from version 1.29.65
  * api-change:``compute-optimizer``: AWS Compute optimizer can now infer if Kafka is running on an
    instance.
  * api-change:``customer-profiles``: This release deprecates the PartyType and Gender enum data
    types from the Profile model and replaces them with new PartyTypeString and GenderString
    attributes, which accept any string of length up to 255.
  * api-change:``frauddetector``: My AWS Service (Amazon Fraud Detector) - This release introduces
    Cold Start Model Training which optimizes training for small datasets and adds intelligent methods
    for treating unlabeled data. You can now train Online Fraud Insights or Transaction Fraud Insights
    models with minimal historical-data.
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added improved scene change
    detection capabilities and a bandwidth reduction filter, along with video quality enhancements, to
    the AVC encoder.
  * api-change:``outposts``: Adds OrderType to Order structure. Adds PreviousOrderId and
    PreviousLineItemId to LineItem structure. Adds new line item status REPLACED. Increases maximum
    length of pagination token.
- from version 1.29.64
  * enhancement:AWSCRT: Upgrade awscrt version to 0.16.9
  * api-change:``proton``: Add new GetResourcesSummary API
  * api-change:``redshift``: Corrects descriptions of the parameters for the API operations
    RestoreFromClusterSnapshot, RestoreTableFromClusterSnapshot, and CreateCluster.
- from version 1.29.63
  * api-change:``appconfig``: AWS AppConfig introduces KMS customer-managed key (CMK) encryption of
    configuration data, along with AWS Secrets Manager as a new configuration data source. S3 objects
    using SSE-KMS encryption and SSM Parameter Store SecureStrings are also now supported.
  * api-change:``connect``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``ec2``: Documentation updates for EC2.
  * api-change:``elbv2``: Update elbv2 client to latest version
  * api-change:``keyspaces``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``quicksight``: QuickSight support for Radar Chart and Dashboard Publish Options
  * api-change:``redshift``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``sso-admin``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
- from version 1.29.62
  * bugfix:``s3``: boto3 no longer overwrites user supplied `Content-Encoding` with `aws-chunked`
    when user also supplies `ChecksumAlgorithm`.
  * api-change:``devops-guru``: This release adds filter support ListAnomalyForInsight API.
  * api-change:``forecast``: This release will enable customer select INCREMENTAL as ImportModel in
    Forecast's CreateDatasetImportJob API. Verified latest SDK containing required attribute, following
    https://w.amazon.com/bin/view/AWS-Seer/Launch/Trebuchet/
  * api-change:``iam``: Documentation updates for AWS Identity and Access Management (IAM).
  * api-change:``mediatailor``: The AWS Elemental MediaTailor SDK for Channel Assembly has added
    support for program updates, and the ability to clip the end of VOD sources in programs.
  * api-change:``sns``: Additional attributes added for set-topic-attributes.
- from version 1.29.61
  * api-change:``accessanalyzer``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``appsync``: This release introduces the feature to support EventBridge as AppSync
    data source.
  * api-change:``cloudtrail-data``: Add CloudTrail Data Service to enable users to ingest activity
    events from non-AWS sources into CloudTrail Lake.
  * api-change:``cloudtrail``: Add new "Channel" APIs to enable users to manage channels used for
    CloudTrail Lake integrations, and "Resource Policy" APIs to enable users to manage the
    resource-based permissions policy attached to a channel.
  * api-change:``codeartifact``: This release introduces a new DeletePackage API, which enables
    deletion of a package and all of its versions from a repository.
  * api-change:``connectparticipant``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``ec2``: This launch allows customers to associate up to 8 IP addresses to their NAT
    Gateways to increase the limit on concurrent connections to a single destination by eight times
    from 55K to 440K.
  * api-change:``groundstation``: DigIF Expansion changes to the Customer APIs.
  * api-change:``iot``: Added support for IoT Rules Engine Cloudwatch Logs action batch mode.
  * api-change:``kinesis``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``opensearch``: Amazon OpenSearch Service adds the option for a VPC endpoint
    connection between two domains when the local domain uses OpenSearch version 1.3 or 2.3. You can
    now use remote reindex to copy indices from one VPC domain to another without a reverse proxy.
  * api-change:``outposts``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``polly``: Amazon Polly adds two new neural American English voices - Ruth, Stephen
  * api-change:``sagemaker``: Amazon SageMaker Automatic Model Tuning now supports more completion
    criteria for Hyperparameter Optimization.
  * api-change:``securityhub``: New fields have been added to the AWS Security Finding Format.
    Compliance.SecurityControlId is a unique identifier for a security control across standards.
    Compliance.AssociatedStandards contains all enabled standards in which a security control is
    enabled.
  * api-change:``support``: This fixes incorrect endpoint construction when a customer is explicitly
    setting a region.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1676462400">- Update to 1.29.71
  * api-change:``appconfig``: AWS AppConfig now offers the option to set a version label on hosted
    configuration versions. Version labels allow you to identify specific hosted configuration versions
    based on an alternate versioning scheme that you define.
  * api-change:``datasync``: With this launch, we are giving customers the ability to use older SMB
    protocol versions, enabling them to use DataSync to copy data to and from their legacy storage
    arrays.
  * api-change:``ec2``: With this release customers can turn host maintenance on or off when
    allocating or modifying a supported dedicated host. Host maintenance is turned on by default for
    supported hosts.
- from version 1.29.70
  * api-change:``account``: This release of the Account Management API enables customers to view and
    manage whether AWS Opt-In Regions are enabled or disabled for their Account. For more information,
    see https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html
  * api-change:``appconfigdata``: AWS AppConfig now offers the option to set a version label on
    hosted configuration versions. If a labeled hosted configuration version is deployed, its version
    label is available in the GetLatestConfiguration response.
  * api-change:``snowball``: Adds support for EKS Anywhere on Snowball. AWS Snow Family customers can
    now install EKS Anywhere service on Snowball Edge Compute Optimized devices.
- from version 1.29.69
  * api-change:``autoscaling``: You can now either terminate/replace, ignore, or wait for EC2 Auto
    Scaling instances on standby or protected from scale in. Also, you can also roll back changes from
    a failed instance refresh.
  * api-change:``connect``: This update provides the Wisdom session ARN for contacts enabled for
    Wisdom in the chat channel.
  * api-change:``ec2``: Adds support for waiters that automatically poll for an imported snapshot
    until it reaches the completed state.
  * api-change:``polly``: Amazon Polly adds two new neural Japanese voices - Kazuha, Tomoko
  * api-change:``sagemaker``: Amazon SageMaker Autopilot adds support for selecting algorithms in
    CreateAutoMLJob API.
  * api-change:``sns``: This release adds support for SNS X-Ray active tracing as well as other
    updates.
- from version 1.29.68
  * api-change:``chime-sdk-meetings``: Documentation updates for Chime Meetings SDK
  * api-change:``emr-containers``: EMR on EKS allows configuring retry policies for job runs through
    the StartJobRun API. Using retry policies, a job cause a driver pod to be restarted automatically
    if it fails or is deleted. The job's status can be seen in the DescribeJobRun and ListJobRun APIs
    and monitored using CloudWatch events.
  * api-change:``evidently``: Updated entity overrides parameter to accept up to 2500 overrides or a
    total of 40KB.
  * api-change:``lexv2-models``: Update lexv2-models client to latest version
  * api-change:``lexv2-runtime``: Update lexv2-runtime client to latest version
  * api-change:``lightsail``: Documentation updates for Lightsail
  * api-change:``migration-hub-refactor-spaces``: This release adds support for creating environments
    with a network fabric type of NONE
  * api-change:``workdocs``: Doc only update for the WorkDocs APIs.
  * api-change:``workspaces``: Removed Windows Server 2016 BYOL and made changes based on IAM
    campaign.
- from version 1.29.67
  * api-change:``backup``: This release added one attribute (resource name) in the output model of
    our 9 existing APIs in AWS backup so that customers will see the resource name at the output. No
    input required from Customers.
  * api-change:``cloudfront``: CloudFront Origin Access Control extends support to AWS Elemental
    MediaStore origins.
  * api-change:``glue``: DirectJDBCSource + Glue 4.0 streaming options
  * api-change:``lakeformation``: This release removes the LFTagpolicyResource expression limits.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677240000">- Update to 1.29.78
  * api-change:``appflow``: This release enables the customers to choose whether to use Private Link
    for Metadata and Authorization call when using a private Salesforce connections
  * api-change:``ecs``: This release supports deleting Amazon ECS task definitions that are in the
    INACTIVE state.
  * api-change:``grafana``: Doc-only update. Updated information on attached role policies for
    customer provided roles
  * api-change:``guardduty``: Updated API and data types descriptions for CreateFilter, UpdateFilter,
    and TriggerDetails.
  * api-change:``iotwireless``: In this release, we add additional capabilities for the FUOTA which
    allows user to configure the fragment size, the sending interval and the redundancy ratio of the
    FUOTA tasks
  * api-change:``location``: This release adds support for using Maps APIs with an API Key in
    addition to AWS Cognito. This includes support for adding, listing, updating and deleting API Keys.
  * api-change:``macie2``: This release adds support for a new finding type,
    Policy:IAMUser/S3BucketSharedWithCloudFront, and S3 bucket metadata that indicates if a bucket is
    shared with an Amazon CloudFront OAI or OAC.
  * api-change:``wafv2``: You can now associate an AWS WAF v2 web ACL with an AWS App Runner service.
- from version 1.29.77
  * api-change:``chime-sdk-voice``: This release introduces support for Voice Connector media metrics
    in the Amazon Chime SDK Voice namespace
  * api-change:``cloudfront``: CloudFront now supports block lists in origin request policies so that
    you can forward all headers, cookies, or query string from viewer requests to the origin *except*
    for those specified in the block list.
  * api-change:``datasync``: AWS DataSync has relaxed the minimum length constraint of AccessKey for
    Object Storage locations to 1.
  * api-change:``opensearch``: This release lets customers configure Off-peak window and software
    update related properties for a new/existing domain. It enhances the capabilities of
    StartServiceSoftwareUpdate API; adds 2 new APIs - ListScheduledActions &amp; UpdateScheduledAction; and
    allows Auto-tune to make use of Off-peak window.
  * api-change:``rum``: CloudWatch RUM now supports CloudWatch Custom Metrics
  * api-change:``ssm``: Document only update for Feb 2023
- from version 1.29.76
  * api-change:``quicksight``: S3 data sources now accept a custom IAM role.
  * api-change:``resiliencehub``: In this release we improved resilience hub application creation and
    maintenance by introducing new resource and app component crud APIs, improving visibility and
    maintenance of application input sources and added support for additional information attributes to
    be provided by customers.
  * api-change:``securityhub``: Documentation updates for AWS Security Hub
  * api-change:``tnb``: This is the initial SDK release for AWS Telco Network Builder (TNB). AWS
    Telco Network Builder is a network automation service that helps you deploy and manage telecom
    networks.
- from version 1.29.75
  * bugfix:SSO: Fixes aws/aws-cli`#7496 &lt;https://github.com/aws/aws-cli/issues/7496&gt;`__ by using the
    correct profile name rather than the one set in the session.
  * api-change:``auditmanager``: This release introduces a ServiceQuotaExceededException to the
    UpdateAssessmentFrameworkShare API operation.
  * api-change:``connect``: Reasons for failed diff has been approved by SDK Reviewer
- from version 1.29.74
  * api-change:``apprunner``: This release supports removing MaxSize limit for
    AutoScalingConfiguration.
  * api-change:``glue``: Release of Delta Lake Data Lake Format for Glue Studio Service
- from version 1.29.73
  * api-change:``emr``: Update emr client to latest version
  * api-change:``grafana``: With this release Amazon Managed Grafana now supports inbound Network
    Access Control that helps you to restrict user access to your Grafana workspaces
  * api-change:``ivs``: Doc-only update. Updated text description in DeleteChannel, Stream, and
    StreamSummary.
  * api-change:``wafv2``: Added a notice for account takeover prevention (ATP). The interface
    incorrectly lets you to configure ATP response inspection in regional web ACLs in Region US East
    (N. Virginia), without returning an error. ATP response inspection is only available in web ACLs
    that protect CloudFront distributions.
- from version 1.29.72
  * api-change:``cloudtrail``: This release adds an InsufficientEncryptionPolicyException type to the
    StartImport endpoint
  * api-change:``efs``: Update efs client to latest version
  * api-change:``frauddetector``: This release introduces Lists feature which allows customers to
    reference a set of values in Fraud Detector's rules. With Lists, customers can dynamically manage
    these attributes in real time. Lists can be created/deleted and its contents can be modified using
    the Fraud Detector API.
  * api-change:``glue``: Fix DirectJDBCSource not showing up in CLI code gen
  * api-change:``privatenetworks``: This release introduces a new StartNetworkResourceUpdate API,
    which enables return/replacement of hardware from a NetworkSite.
  * api-change:``rds``: Database Activity Stream support for RDS for SQL Server.
  * api-change:``wafv2``: For protected CloudFront distributions, you can now use the AWS WAF Fraud
    Control account takeover prevention (ATP) managed rule group to block new login attempts from
    clients that have recently submitted too many failed login attempts.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1678708800">- Update to 1.29.89
  * api-change:``ivschat``: This release adds a new exception returned when calling AWS IVS chat
    UpdateLoggingConfiguration. Now UpdateLoggingConfiguration can return ConflictException when
    invalid updates are made in sequence to Logging Configurations.
  * api-change:``secretsmanager``: The type definitions of SecretString and SecretBinary now have a
    minimum length of 1 in the model to match the exception thrown when you pass in empty values.
- from version 1.29.88
  * api-change:``codeartifact``: This release introduces the generic package format, a mechanism for
    storing arbitrary binary assets. It also adds a new API, PublishPackageVersion, to allow for
    publishing generic packages.
  * api-change:``connect``: This release adds a new API, GetMetricDataV2, which returns metric data
    for Amazon Connect.
  * api-change:``evidently``: Updated entity override documentation
  * api-change:``networkmanager``: This update provides example usage for TransitGatewayRouteTableArn.
  * api-change:``quicksight``: This release has two changes: add state persistence feature for
    embedded dashboard and console in GenerateEmbedUrlForRegisteredUser API; add properties for hidden
    collapsed row dimensions in PivotTableOptions.
  * api-change:``redshift-data``: Added support for Redshift Serverless workgroup-arn wherever the
    WorkgroupName parameter is available.
  * api-change:``sagemaker``: Amazon SageMaker Inference now allows SSM access to customer's model
    container by setting the "EnableSSMAccess" parameter for a ProductionVariant in
    CreateEndpointConfig API.
  * api-change:``servicediscovery``: Updated all AWS Cloud Map APIs to provide consistent throttling
    exception (RequestLimitExceeded)
  * api-change:``sesv2``: This release introduces a new recommendation in Virtual Deliverability
    Manager Advisor, which detects missing or misconfigured Brand Indicator for Message Identification
    (BIMI) DNS records for customer sending identities.
- from version 1.29.87
  * api-change:``athena``: A new field SubstatementType is added to GetQueryExecution API, so
    customers have an error free way to detect the query type and interpret the result.
  * api-change:``dynamodb``: Adds deletion protection support to DynamoDB tables. Tables with
    deletion protection enabled cannot be deleted. Deletion protection is disabled by default, can be
    enabled via the CreateTable or UpdateTable APIs, and is visible in TableDescription. This setting
    is not replicated for Global Tables.
  * api-change:``ec2``: Introducing Amazon EC2 C7g, M7g and R7g instances, powered by the latest
    generation AWS Graviton3 processors and deliver up to 25% better performance over Graviton2-based
    instances.
  * api-change:``lakeformation``: This release adds two new API support "GetDataCellsFiler" and
    "UpdateDataCellsFilter", and also updates the corresponding documentation.
  * api-change:``mediapackage-vod``: This release provides the date and time VOD resources were
    created.
  * api-change:``mediapackage``: This release provides the date and time live resources were created.
  * api-change:``route53resolver``: Add dual-stack and IPv6 support for Route 53 Resolver
    Endpoint,Add IPv6 target IP in Route 53 Resolver Forwarding Rule
  * api-change:``sagemaker``: There needs to be a user identity to specify the SageMaker user who
    perform each action regarding the entity. However, these is a not a unified concept of user
    identity across SageMaker service that could be used today.
- from version 1.29.86
  * api-change:``dms``: This release adds DMS Fleet Advisor Target Recommendation APIs and exposes
    functionality for DMS Fleet Advisor. It adds functionality to start Target Recommendation
    calculation.
  * api-change:``location``: Documentation update for the release of 3 additional map styles for use
    with Open Data Maps: Open Data Standard Dark, Open Data Visualization Light &amp; Open Data
    Visualization Dark.
- from version 1.29.85
  * api-change:``account``: AWS Account alternate contact email addresses can now have a length of
    254 characters and contain the character "|".
  * api-change:``ivs``: Updated text description in DeleteChannel, Stream, and StreamSummary.
- from version 1.29.84
  * api-change:``dynamodb``: Documentation updates for DynamoDB.
  * api-change:``ec2``: This release adds support for a new boot mode for EC2 instances called 'UEFI
    Preferred'.
  * api-change:``macie2``: Documentation updates for Amazon Macie
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has improved handling for
    different input and output color space combinations.
  * api-change:``medialive``: AWS Elemental MediaLive adds support for Nielsen watermark timezones.
  * api-change:``transcribe``: Amazon Transcribe now supports role access for these API operations:
    CreateVocabulary, UpdateVocabulary, CreateVocabularyFilter, and UpdateVocabularyFilter.
- from version 1.29.83
  * api-change:``iot``: A recurring maintenance window is an optional configuration used for rolling
    out the job document to all devices in the target group observing a predetermined start time,
    duration, and frequency that the maintenance window occurs.
  * api-change:``migrationhubstrategy``: This release updates the File Import API to allow importing
    servers already discovered by customers with reduced pre-requisites.
  * api-change:``organizations``: This release introduces a new reason code,
    ACCOUNT_CREATION_NOT_COMPLETE, to ConstraintViolationException in CreateOrganization API.
  * api-change:``pi``: This release adds a new field PeriodAlignment to allow the customer specifying
    the returned timestamp of time periods to be either the start or end time.
  * api-change:``pipes``: This release fixes some input parameter range and patterns.
  * api-change:``sagemaker``: Add a new field "EndpointMetrics" in SageMaker Inference Recommender
    "ListInferenceRecommendationsJobSteps" API response.
- from version 1.29.82
  * api-change:``codecatalyst``: Published Dev Environments StopDevEnvironmentSession API
  * api-change:``pricing``: This release adds 2 new APIs - ListPriceLists which returns a list of
    applicable price lists, and GetPriceListFileUrl which outputs a URL to retrieve your price lists
    from the generated file from ListPriceLists
  * api-change:``s3outposts``: S3 on Outposts introduces a new API ListOutpostsWithS3, with this API
    you can list all your Outposts with S3 capacity.
- from version 1.29.81
  * enhancement:Documentation: Splits service documentation into multiple sub-pages for better
    organization and faster loading time.
  * api-change:``comprehend``: Amazon Comprehend now supports flywheels to help you train and manage
    new model versions for custom models.
  * api-change:``ec2``: This release allows IMDS support to be set to v2-only on an existing AMI, so
    that all future instances launched from that AMI will use IMDSv2 by default.
  * api-change:``kms``: AWS KMS is deprecating the RSAES_PKCS1_V1_5 wrapping algorithm option in the
    GetParametersForImport API that is used in the AWS KMS Import Key Material feature. AWS KMS will
    end support for this wrapping algorithm by October 1, 2023.
  * api-change:``lightsail``: This release adds Lightsail for Research feature support, such as GUI
    session access, cost estimates, stop instance on idle, and disk auto mount.
  * api-change:``managedblockchain``: This release adds support for tagging to the accessor resource
    in Amazon Managed Blockchain
  * api-change:``omics``: Minor model changes to accomodate batch imports feature
- from version 1.29.80
  * api-change:``devops-guru``: This release adds the description field on ListAnomaliesForInsight
    and DescribeAnomaly API responses for proactive anomalies.
  * api-change:``drs``: New fields were added to reflect availability zone data in source server and
    recovery instance description commands responses, as well as source server launch status.
  * api-change:``internetmonitor``: CloudWatch Internet Monitor is a a new service within CloudWatch
    that will help application developers and network engineers continuously monitor internet
    performance metrics such as availability and performance between their AWS-hosted applications and
    end-users of these applications
  * api-change:``lambda``: This release adds the ability to create ESMs with Document DB change
    streams as event source. For more information see
    https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.html.
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added support for HDR10 to
    SDR tone mapping, and animated GIF video input sources.
  * api-change:``timestream-write``: This release adds the ability to ingest batched historical data
    or migrate data in bulk from S3 into Timestream using CSV files.
- from version 1.29.79
  * api-change:``connect``: StartTaskContact API now supports linked task creation with a new
    optional RelatedContactId parameter
  * api-change:``connectcases``: This release adds the ability to delete domains through the
    DeleteDomain API. For more information see
    https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
  * api-change:``redshift``: Documentation updates for Redshift API bringing it in line with IAM best
    practices.
  * api-change:``securityhub``: New Security Hub APIs and updates to existing APIs that help you
    consolidate control findings and enable and disable controls across all supported standards
  * api-change:``servicecatalog``: Documentation updates for Service Catalog</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680696000">- Update in SLE-15 (bsc#1209255, jsc#PED-3780)
- Add python-python-dateutil and python-jmespath to BuildRequires
- Remove version constraint on python-pytest in BuildRequires
- Revert changes to Requires that introduced new incompatible syntax</changelog>
</package>
<package pkgid="4e8aba7b04e73e8941ea29d4883a0dbec7f4779c7c5a68b93f01bce21881744e" name="python-jmespath" arch="src">
  <version epoch="0" ver="0.9.3" rel="150000.3.3.4"/>
  <changelog author="rschweikert@suse.com" date="1390046400">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 0.4.1
  + No upstream changelog</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 0.5.0
  + No upstream changelog
  + Update in support for fix of bnc#905354</changelog>
  <changelog author="aboe76@gmail.com" date="1427371200">- Updated to version 0.6.1
  + No Upstream Changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.7.0:
  * Add support for JEP-12, raw string literals
  * Support .whl files
- additional changes from version 0.6.2:
  * Implement JEP-10, slice projections
  * Fix bug with filter projection parsing
  * Add to_array function
  * Add merge function
  * Fix error messages for function argument type errors
- point source URL to pypi</changelog>
  <changelog author="rjschwei@suse.com" date="1432728000">- Update to version 0.7.1:
  * Rename ``bin/jp`` to ``bin/jp.py``
  * Fix issue with precedence when parsing wildcard
    projections
  * Remove ordereddict and simplejson as py2.6 dependencies.
    These were never actually used in the jmespath code base,
    only in the unit tests.  Unittests requirements are handled
    via requirements26.txt.</changelog>
  <changelog author="rjschwei@suse.com" date="1453291200">- Manage the jp executable with update-alternatives now that
  python3-jmespath exists
- spec file improvements</changelog>
  <changelog author="rjschwei@suse.com" date="1453291201">- Fix build issues for SLE 11
  + More test dependencies required</changelog>
  <changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 0.9.0
  * Add support for new lines with tokens in an expression
  * Add support for JEP 9 which introduces "and" expressions, "unary"
    expressions, "not" expressions, and "paren" expressions
  * Fix issue with hardcoded path in ``jp.py`` executable
    (issue 90, issue 88, issue 82)
- Update to version 0.8.0
  * Improve lexing performance (issue 84)
  * Fix parsing error for multiselect lists (issue 86)
  * Fix issue with escaping single quotes in literal strings (issue 85)
  * Add support for providing your own dict cls to support
    ordered dictionaries (issue 94)
  * Add map() function (issue 95)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to version 0.9.2
  + Fix regression when using ordering comparators on strings (issue 124)
- From 0.9.1
  + Raise LexerError on invalid numbers (issue 98)
  + Add support for custom functions (#100) (issue 100)
  + Fix ZeroDivisionError for built-in function avg() on empty lists (#115)
    (issue 115)
  + Properly handle non numerical ordering operators (#117) (issue 117)</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- Only BuildRequire unittest2 for python2</changelog>
  <changelog author="jmatejek@suse.com" date="1490788801">- properly Requires(postun) for %postun section</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to 0.9.3:
  + Fix issue where long types in py2 and Decimal types were not
    being evaluated as numbers (issue 125)
  + Handle numbers in scientific notation in to_number() function (issue 120)
  + Fix issue where custom functions would override the function
    table of the builtin function class (issue 133)</changelog>
</package>
<package pkgid="b07c5c7a36629404a38b70df79a29e1052d9f332ad1be01670213a13f2ed12c0" name="python-looseversion" arch="src">
  <version epoch="0" ver="1.0.2" rel="150100.3.3.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1679313600">- Initial package: looseversion 1.0.2</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1679486400">- Fix package build with old setuptools versions
- Added:
  * add_compatible_setup_py_file.patch</changelog>
</package>
<package pkgid="a6111798bccf28a665d1a82b97a328773d7d36ada13fe3b3b8fc217a78c20a76" name="python-packaging" arch="src">
  <version epoch="0" ver="21.3" rel="150200.3.3.1"/>
  <changelog author="tbechtold@suse.com" date="1565092800">- update to 19.1:
  * Add the ``packaging.tags`` module.
  * Correctly handle two-digit versions in ``python_version``</changelog>
  <changelog author="dcermak@suse.com" date="1565265600">- Add Requires:python-attrs as this is a new dependency
  this fixes bsc#1144506</changelog>
  <changelog author="dcermak@suse.com" date="1565265601">- Enable tests via _multibuild
  Add patches from https://github.com/pypa/packaging/pull/176:
  * 0001-Fix-test-failures-test_linux_platforms_manylinux-for.patch
  * 0002-Fix-check-for-64-bit-OS.patch
  * 0003-Add-additional-test-to-get-100-branch-coverage.patch
  * 0004-Fix-test_macos_version_detection-failure-on-32-bit-L.patch
  (these fix the tests on non-x86 platforms and can be dropped on the next
  release)</changelog>
  <changelog author="tchvatal@suse.com" date="1565870400">- Fix a bit the multibuild conversion
- Remove the attrs from the deps as they are no longer needed</changelog>
  <changelog author="dcermak@suse.com" date="1566216000">- Remove dependency on attrs
  Add: 0005-Drop-dependency-on-attrs.patch
  this fixes bsc#1144506</changelog>
  <changelog author="tchvatal@suse.com" date="1570536000">- Update to 19.2:
  * Many buildsystem tweaks to accomodate for distribution shipping
- Remove all the merged patches:
  * 0001-Fix-test-failures-test_linux_platforms_manylinux-for.patch
  * 0002-Fix-check-for-64-bit-OS.patch
  * 0003-Add-additional-test-to-get-100-branch-coverage.patch
  * 0004-Fix-test_macos_version_detection-failure-on-32-bit-L.patch
  * 0005-Drop-dependency-on-attrs.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580904000">- Update to 20.1
  * Fix a bug caused by reuse of an exhausted iterator.
  * Add type hints
  * Add proper trove classifiers for PyPy support
  * Scale back depending on ctypes for manylinux support detection
  * Use sys.implementation.name where appropriate for packaging.tags
  * Expand upon the API provded by packaging.tags
  * Officially support Python 3.8
  * Add major, minor, and micro aliases to packaging.version.Version
  * Properly mark packaging has being fully typed by adding a py.typed file</changelog>
  <changelog author="mimi.vx@gmail.com" date="1581336000">- add issue_254.patch to fix tests under non-x86_64 pplatforms</changelog>
  <changelog author="mcalabkova@suse.com" date="1583928000">- Update to 20.3
  * Fix a bug that caused a 32-bit OS that runs on a 64-bit ARM CPU
    (e.g. ARM-v8, aarch64), to report the wrong bitness.
- Drop already upstreamed patch issue_254.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1588680000">- Ignore clamav scan as it bogusly calls one file to be infected
  while it is just a testcase of malformed binary:
  [#]!BuildIgnore: post-build-checks-malwarescan</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 20.4:
  * Canonicalize version before comparing specifiers. (:issue:`282`)
  * Change type hint for ``canonicalize_name`` to return
  ``packaging.utils.NormalizedName``.
  This enables the use of static typing tools (like mypy) to detect mixing of
  normalized and un-normalized names.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 20.8:
  * Revert back to setuptools for compatibility purposes for some Linux distros (:issue:`363`)
  * Do not insert an underscore in wheel tags when the interpreter version number
    is more than 2 digits (:issue:`372`)
  * Fix flit configuration, to include LICENSE files (:issue:`357`)
  * Make `intel` a recognized CPU architecture for the `universal` macOS platform tag (:issue:`361`)
  * Add some missing type hints to `packaging.requirements` (issue:`350`)
  * Officially support Python 3.9 (:issue:`343`)
  * Deprecate the ``LegacyVersion`` and ``LegacySpecifier`` classes (:issue:`321`)
  * Handle ``OSError`` on non-dynamic executables when attempting to resolve
    the glibc version string.</changelog>
  <changelog author="dmueller@suse.com" date="1612267200">- update to 20.9:
  * Run [isort](https://pypi.org/project/isort/) over the code base (:issue:`377`)
  * Add support for the ``macosx_10_*_universal2`` platform tags (:issue:`379`)
  * Introduce ``packaging.utils.parse_wheel_filename()`` and ``parse_sdist_filename()``</changelog>
  <changelog author="dmueller@suse.com" date="1619870400">- add no-legacyversion-warning.patch to restore compatibility with 20.4</changelog>
  <changelog author="code@bnavigator.de" date="1623931200">- Add Provides: for python*dist(packaging): work around boo#1186870
- skip tests failing because of no-legacyversion-warning.patch</changelog>
  <changelog author="dmueller@suse.com" date="1636200000">- update to 21.2:
  * Update documentation entry for 21.1.
  * Update pin to pyparsing to exclude 3.0.0.
  * PEP 656: musllinux support
  * Drop support for Python 2.7, Python 3.4 and Python 3.5.
  * Replace distutils usage with sysconfig
  * Add support for zip files in ``parse_sdist_filename``
  * Use cached ``_hash`` attribute to short-circuit tag equality comparisons
  * Specify the default value for the ``specifier`` argument to ``SpecifierSet``
  * Proper keyword-only "warn" argument in packaging.tags
  * Correctly remove prerelease suffixes from ~= check
  * Fix type hints for ``Version.post`` and ``Version.dev``
  * Use typing alias ``UnparsedVersion``
  * Improve type inference for ``packaging.specifiers.filter()``
  * Tighten the return type of ``canonicalize_version()``</changelog>
  <changelog author="buschmann23@opensuse.org" date="1637755200">- update to 21.3:
  * Add a pp3-none-any tag (gh#pypa/packaging#311)
  * Replace the blank pyparsing 3 exclusion with a 3.0.5 exclusion
    (gh#pypa/packaging#481), (gh#pypa/packaging#486)
  * Fix a spelling mistake (gh#pypa/packaging#479)</changelog>
  <changelog author="hui.zhi.zhao@suse.com" date="1650888000">- Ignore python3.6.2 since the test doesn't support it.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1653825600">- Add patch to fix testsuite on big-endian targets
  + fix-big-endian-build.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
</package>
<package pkgid="a4c436278facb61425dc28d45336ef15d6ce1b086acdb83715f74de583c2278e" name="python-ply" arch="src">
  <version epoch="0" ver="3.10" rel="150000.3.3.4"/>
  <changelog author="maw@suse.de" date="1176465600">- Initial import into the build service
- Rename ply.spec to python-ply.spec as that is what the resultant
  package is called.</changelog>
  <changelog author="maw@suse.de" date="1193140800">- Don't build as noarch.</changelog>
  <changelog author="maw@suse.de" date="1205755200">- Import into autobuild
- Add a -doc subpackage
- Add python-ply-shebangs.patch</changelog>
  <changelog author="maw@suse.de" date="1217246400">- Update to version 2.5:
  + Various bug fixes
  + Some performance improvements
  + For a blow-by-blow account of changes, see the file CHANGES
    in the package python-ply-doc.</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- Use new python macros</changelog>
  <changelog author="coolo@novell.com" date="1284465600">- Update to 3.3:
  + PLY-3.3 is a minor bug fix release, it supports both Python 2
    and Python 3.
- License changed to BSD</changelog>
  <changelog author="saschpe@suse.de" date="1301400000">- Update to 3.4:
  + Minor patch to make cpp.py compatible with Python 3.
  + Fixed setup.py trove classifiers to properly list PLY as Python
    3 compatible.
- License changed to BSD3c
- Packaged more doc files
- Moved important docs (README, ..) to base package
- Fixed build for non-SUSE distros</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1337947200">- python3 package added</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947201">- spec file cleanups</changelog>
  <changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 3.6:
  * If PLY is unable to create the 'parser.out' or 'parsetab.py'
    files due to permission issues, it now just issues a warning
    message and continues to operate
  * Fixed some issues related to use of packages and table file
    modules
- additional changes from version 3.5:
  * Added support for defaulted_states in the parser
  * Fixed debug logging in the parser
  * Added actions to be defined to character literals (Issue #32)
  * Import of the 'parsetab.py' file is now constrained to only
    consider the directory specified by the outputdir argument to
    yacc()
  * Changed default output directory to be the same as that in
    which the yacc grammar is defined
  * Changed the parsetab.py file signature slightly so that the
    parsetab won't regenerate if created on a different major
    version of Python
  * Fixed Issue #44 call_errorfunc() should return the result of
    errorfunc()
  * Support for versions of Python &lt;2.7 is officially dropped
  * Fixed bug related to calling yacc(start=...)
  * Added skipped tests for PyPy and Java
  * Added filter to make unit tests pass under 'python -3'
  * Fixed CPP_INTEGER regex in ply/cpp.py (Issue 21)
  * Fixed yacc validation bugs when from __future__ import
    unicode_literals is being used
  * Added support for Travis-CI
  * Added a .gitignore file
  * Fixed validation problems for source files that include a
    different source code encoding specifier
  * Fixed unit tests for yacc to eliminate random failures due to
    dict hash value randomization in Python 3.3
  * Fixed comment whitespace processing bugs in ply/cpp.py
  * Fixed token names in ply/ctokens.py to match rule names
  * Changes to functions available in panic mode error recover
  * Fixed some problems with line and position tracking and the use
    of error symbols
  * Change to doc string handling in lex module
  * Fixed issue #1: Fixed _tabversion. It should use __tabversion__
    instead of __version__
  * Fixed issue #8: Literals empty list causes IndexError
  * Fixed issue #12: Typo in code snippet in documentation
  * Fixed issue #10: Correctly escape t_XOREQUAL pattern.
- clean the test and example directories
- remove stray backup files in doc
- remove unneeded executable bit of testlex.py
- remove CFLAGS export: unneeded
- do not drop executable bit of everything in test since
  it contains subdirectories
- remove useless clean section
- remove README from package: not provided anymore</changelog>
  <changelog author="hpj@urpla.net" date="1444219200">- update to version 3.8:
  * Fixed issues related to Python 3.5. Patch contributed by Barry Warsaw.
- update to version 3.7
  * Fixed problems when reading table files from pickled data.
  * Fixed regression in handling of table modules if specified as module
    objects.   See https://github.com/dabeaz/ply/issues/63
- clean up spec
- add testing rig</changelog>
  <changelog author="tbechtold@suse.com" date="1472817600">- update to 3.9:
  * Exposed the parser state number as the parser.state attribute
    in productions and error functions.
  * Fixed Issue #88. Python3 compatibility with ply/cpp.
  * Fixed Issue #93. Ply can crash if SyntaxError is raised inside
    a production.   Not actually sure if the original implementation
    worked as documented at all.  Yacc has been modified to follow
    the spec as outlined in the CHANGES noted for 11/27/07 below.
  * Fixed Issue #97. Failure with code validation when the original
    source files aren't present.   Validation step now ignores
    the missing file.
  * Minor fixes to version numbers.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10
  * Changed grammar signature computation to not involve hashing
    functions. Parts are just combined into a big string.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
</package>
<package pkgid="e71b500e39c7fb1f660e94ee1d56b215f2a94d5de9cda0d89c0523ff5812ed61" name="python-pyzmq" arch="src">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="speilicke@suse.com" date="1364385600">- Update to version 13.0.0:
  + PyPy support
  + The Threadsafe ZMQStream experiment in 2.2.0.1 was deemed inappropriate and not useful,
    and has been removed.
  + The zmq.web experiment has been removed, to be developed as a standalone project
  + Fixes bnc#811890
- Add rpmlintrc
- Drop useless macros
- Run testsuite</changelog>
  <changelog author="cfarrell@suse.com" date="1365163200">- license update: LGPL-3.0+ and BSD-3-Clause
  the core is LGPL-3.0+ but most of what is outside the code is
  BSD-3-Clause</changelog>
  <changelog author="toddrme2178@gmail.com" date="1365768000">- Changes suggests to recommends since there is no way to install suggets currently</changelog>
  <changelog author="p.drouand@gmail.com" date="1385294400">- Update to version 14.0.0
  + Update bundled libzmq to current (4.0.1).
  + Backends are now implemented in ``zmq.backend`` instead of ``zmq.core``.
    This has no effect on public APIs.
  + Various build improvements for Cython and CFFI backends (PyPy
    compiles at build time).
  + Various GIL-related performance improvements - the GIL is no longer
    touched from a zmq IO thread.
  + Adding a constant should now be a bit easier - only zmq/sugar/constant
  _names should need updating,
    all other constant-related files should be automatically updated by
    ``setup.py constants``.
  + add support for latest libzmq-4.0.1
    (includes ZMQ_CURVE security and socket event monitoring).
- Changes from version 13.1.0
  + The main new feature is improved tornado 3 compatibility.
    PyZMQ ships a 'minitornado' submodule, which contains a small
    subset of tornado 3.0.1,
    in order to get the IOLoop base class.  zmq.eventloop.ioloop.IOLoop
    is now a simple subclass, and if the system tornado is ≥ 3.0, then
    the zmq IOLoop is a proper registered subclass of the tornado one itself,
    and minitornado is entirely unused.
- Changes from version 13.0.2
  + EAGAIN was unconditionally turned into KeyboardInterrupt
  + fix use of totally deprecated ctypes_configure to generate constants in CFFI backend
  + fix memory leak in CFFI backend for PyPy
  + typo prevented IPC_PATH_MAX_LEN from ever being defined
  + various build fixes - linking with librt, Cython compatibility, etc.</changelog>
  <changelog author="dmueller@suse.com" date="1392206400">- disable testsuite for qemu-linux-user builds</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1412164800">- Update to 14.3.1
  + Minor bugfixes to pyzmq 14.3:
  * Fixes to building bundled libzmq on OS X &lt; 10.9
  * Fixes to import-failure warnings on Python 3.4
  * Fixes to tests
  * Pull upstream fixes to zmq.ssh for ssh multiplexing
- Update to 14.3.0
  + PyZMQ no longer calls :meth:`.Socket.close` or
    :meth:`.Context.term` during process cleanup.
    Changes to garbage collection in Python 3.4 make this
    impossible to do sensibly.
  + :meth:`ZMQStream.close` closes its socket immediately,
    rather than scheduling a timeout.
  + Raise the original ImportError when importing zmq fails.
    Should be more informative than `no module cffi...`.
- Update to 14.2.0
  + New Stuff
  * Raise new ZMQVersionError when a requested method is not
    supported by the linked libzmq.
    For backward compatibility, this subclasses
    NotImplementedError.
  + Bugs Fixed
  * Memory leak introduced in pyzmq-14.0 in zero copy.
  * OverflowError on 32 bit systems in zero copy.
- Update to 14.1.0
  + Security
    The headline features for 14.1 are adding better support for
    libzmq's security features.
  * When libzmq is bundled as a Python extension
    (e.g. wheels, eggs), libsodium is also bundled
    (excluding Windows), ensuring that libzmq security is
    available to users who install from wheels
  * New :mod:`zmq.auth`, implementing zeromq's ZAP authentication,
    modeled on czmq zauth.
    For more information, see the
    `examples &lt;https://github.com/zeromq/pyzmq/tree/master/examples/&gt;`_.
  + Other New Stuff
  * Add PYZMQ_BACKEND for enabling use of backends outside the
    pyzmq codebase.
  * Add :attr:`~.Context.underlying` property and
    :meth:`~.Context.shadow` method to Context and Socket, for
    handing off sockets and contexts. between pyzmq and other
    bindings (mainly pyczmq_).
  * Add TOS, ROUTER_HANDOVER, and IPC_FILTER constants from
    libzmq-4.1-dev.
  * Add Context option support in the CFFI backend.
  * Various small unicode and build fixes, as always.
  * :meth:`~.Socket.send_json` and :meth:`~.Socket.recv_json`
    pass any extra kwargs to ``json.dumps/loads``.
  + Deprecations
  * ``Socket.socket_type`` is deprecated, in favor of
    ``Socket.type``, which has been available since 2.1.
- Update to 14.0.1
  + Bugfix release
  * Update bundled libzmq to current (4.0.3).
  * Fix bug in :meth:`.Context.destroy` with no open sockets.
  * Threadsafety fixes in the garbage collector.
  * Python 3 fixes in :mod:`zmq.ssh`.</changelog>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="3bba106158dd6052b6ee7afe2978027afbef7b2b3005bb71f3d627b1aba85694" name="python-requests" arch="src">
  <version epoch="0" ver="2.24.0" rel="150300.3.3.1"/>
  <changelog author="aplanas@suse.com" date="1520424000">- Allows Recommends and Suggest in Fedora</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530532800">- update to version 2.19.1:
  * Fixed issue where status_codes.py’s init function failed trying
    to append to a __doc__ value of None.
- update to version 2.19.0:
  * Improvements
    + Warn about possible slowdown with cryptography version &lt; 1.3.4
    + Check host in proxy URL, before forwarding request to adapter.
    + Maintain fragments properly across redirects. (RFC7231 7.1.2)
    + Removed use of cgi module to expedite library load time.
    + Added support for SHA-256 and SHA-512 digest auth algorithms.
    + Minor performance improvement to Request.content.
    + Migrate to using collections.abc for 3.7 compatibility.
  * Bugfixes
    + Parsing empty Link headers with parse_header_links() no longer
    return one bogus entry.
    + Fixed issue where loading the default certificate bundle from
    a zip archive would raise an IOError.
    + Fixed issue with unexpected ImportError on windows system
    which do not support winreg module.
    + DNS resolution in proxy bypass no longer includes the username
    and password in the request. This also fixes the issue of DNS
    queries failing on macOS.
    + Properly normalize adapter prefixes for url comparison.
    + Passing None as a file pointer to the files param no longer
    raises an exception.
    + Calling copy on a RequestsCookieJar will now preserve the
    cookie policy correctly.
  * We now support idna v2.7 and urllib3 v1.23.
- Properly set idna/urllib3 dependency versions, runtime and buildtime
- Spec cleanup, remove conditionals for ancient distro versions
- Remove duplicates with fdupes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1531742400">- make multibuild package to resolve circular deps on tests</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532001600">- -test subpackage must be empty</changelog>
  <changelog author="arun@gmx.de" date="1540036800">- specfile:
  * remove devel for noarch
  * remove restriction for urllib3 &lt; 1.24
  * HISTORY and README changed from .rst to .md
- update to version 2.20.0 bsc#1111622:
  * Bugfixes
    + Content-Type header parsing is now case-insensitive
    (e.g. charset=utf8 v Charset=utf8).
    + Fixed exception leak where certain redirect urls would raise
    uncaught urllib3 exceptions.
    + Requests removes Authorization header from requests redirected
    from https to http on the same hostname. (CVE-2018-18074)
    + should_bypass_proxies now handles URIs without hostnames
    (e.g. files).
  * Dependencies
    + Requests now supports urllib3 v1.24.
  * Deprecations
    + Requests has officially stopped support for Python 2.6.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Ensure neutrality of descriptions.</changelog>
  <changelog author="arun@gmx.de" date="1542974400">- update to version 2.20.1:
  * Bugfixes
    + Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
  <changelog author="mcepl@suse.com" date="1546257600">- Move name ahead of version in spec file to resolve build issues
  on older distributions
- fdupe more thoroughly.</changelog>
  <changelog author="jbrownell@suse.com" date="1547035200">- Support older Red Hat platforms that don't offer "Recommends:"</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)
- Switch off test_https_warnings test (bsc#1170175)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686657600">- Add CVE-2023-32681.patch to fix unintended leak of
  Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
  Upstream commit: gh#psf/requests@74ea7cf7a6a2</changelog>
</package>
<package pkgid="b582e188b82ce71451237072fab01e2e3910dae928eb355bc5c7f6fb1bf00576" name="python-rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="cthiel@suse.de" date="1223467200">- added libelf-devel to BuildRequires to fix build</changelog>
  <changelog author="ro@suse.de" date="1234440000">- adapt buildrequires</changelog>
  <changelog author="dmueller@suse.de" date="1287403200">- adapt buildrequires</changelog>
  <changelog author="coolo@novell.com" date="1287748800">- adapt second spec file to changes done to rpm.spec</changelog>
  <changelog author="mls@suse.de" date="1298462400">- drop standard python directories from filelist [bnc#229189]</changelog>
  <changelog author="coolo@suse.com" date="1323604800">- add libtool as explicit buildrequire</changelog>
  <changelog author="saschpe@suse.de" date="1326801600">- Spec file cleanup:
  * Don't rm -rf %{buildroot}
  * Removed %clean section
  * Removed authors from description</changelog>
  <changelog author="klaussfreire@gmail.com" date="1334145600">- Fix usage of deprecated AsVoidPtr Python/C API,
  replaced by Capsule API</changelog>
  <changelog author="mls@suse.de" date="1335182400">- modified capsule api diff to match rpm upstream</changelog>
  <changelog author="dmueller@suse.com" date="1357128000">- Update to 4.10.2</changelog>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="5a0cbb6e769ccc875125bdec65654cdf0f1b0a624907bd8612451ee2acb8dea8" name="python-s3transfer" arch="src">
  <version epoch="0" ver="0.6.0" rel="150200.9.7.1"/>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to version 0.1.11:
  + Properly handle unicode exceptions in the context manager</changelog>
  <changelog author="mimi.vx@gmail.com" date="1524139200">- update to 0.1.13 (bsc#1075263)
- add system-requests.patch - use system python-requests
  * Plumb ``RequestPayer` argument to the ``CompleteMultipartUpload` operation
  * enhancement:max_bandwidth: Add ability to set maximum bandwidth consumption
  for streaming of S3 uploads and downloads</changelog>
  <changelog author="tchvatal@suse.com" date="1525780800">- Make sure to really not use any damn bundles:
  * no-bundled-packages.patch
  * Never rely on some bundled package version just use system libs
- Enable testsuite and make it pass thanks to above patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Avoid running tests on 32bit as they fail there on oom</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550059200">- Update to version 0.2.0
  * feature:``ProcessPoolDownloader``: Add ``ProcessPoolDownloader`` class
    to speed up download throughput by using processes instead of threads.
- Drop obsolete patch
  + system-requests.patch
- Refresh patches for new version
  + hide_py_pckgmgmt.patch
  + no-bundled-packages.patch
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1560340800">- Update to version 0.2.1 (bsc#1146853)
  * enhancment:ProcessPool: Adds user agent suffix.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1566475200">- Update in SLE-15 (bsc#1146854)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1580126400">- Update to version 0.3.2
  * bugfix:s3: Fixes boto/botocore`#1916 &lt;https://github.com/boto/botocore/issues/1916&gt;`__
- from version 0.3.1
  * enhancement:TransferManager: Expose client and config properties
  * enhancement:Tags: Add support for Tagging and TaggingDirective
- from version 0.3.0
  * feature:Python: Dropped support for Python 2.6 and 3.3.
- Refresh patches for new version
  + hide_py_pckgmgmt.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1582804800">- Update to 0.3.3:
  * bugfix:dependency: Updated botocore version range
- Drop patch hide_py_pckgmgmt.patch it should not be needed
  * we updated setuptools on SLE 12 to handle complex dependencies
- Use pytest for test execution:
  * the nose is used by upstream but really not needed and it
    will get borked with python 3.10</changelog>
  <changelog author="tchvatal@suse.com" date="1583841600">- Skip test failing on python 3.8, it is race condition that needs
  to be fixed in tests</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix build without python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1586260800">- Fix build on SLE-12
  + Add python to BuildRequires for suse_version &lt; 1500
  + Add python-scandir to BuildRequires for suse_version &lt; 1500</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1586520000">- Update in SLE-15 (bsc#1168943)</changelog>
  <changelog author="rjschwei@suse.com" date="1606392000">- Only build Python3 flavors for distributions 15 and greater</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to 0.3.4:
  * enhancement:s3: Add server side encryption context into allowed list</changelog>
  <changelog author="alarrosa@suse.com" date="1621425600">- Update to 0.4.2:
  * enhancement:s3: Add support for ExpectedBucketOwner. Fixes #181.
- Update to 0.4.1:
  * enhancement:crt: Add set_exception to CRTTransferFuture to allow setting exceptions in subscribers.
- Update to 0.4.0:
  * feature:crt: Add optional AWS Common Runtime (CRT) support. The AWS CRT provides a C-based S3 transfer client that can improve transfer throughput.
- Update to 0.3.7:
  * bugfix:ReadFileChunk: Fix seek behavior in ReadFileChunk class
- Update to 0.3.6:
  * bugfix:packaging: Fix setup.py metadata for futures on Python 2.7
- Update to 0.3.5:
  * enhancement:s3: Block TransferManager methods for S3 Object Lambda resources</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1627387200">- Update 0.5.0: (bsc#1189649)
  * feature:Python: Dropped support for Python 2.7
- Disable Python2 builds for all SUSE distributions
- Remove Python2 build dependencies from spec file</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1654257600">- Update to 0.6.0
  * feature:Python: Dropped support for Python 3.6
- from version 0.5.2
  * enhancement:``s3``: Added support for flexible checksums
    when uploading or downloading objects.
- from version 0.5.1
  * enhancement:Python: Officially add Python 3.10 support
- Drop unused python-mock dependency from BuildRequires
- Refresh patches for new version
  + no-bundled-packages.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667476800">- Update in SLE-15 (bsc#1204537, jsc#PED-2333)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680696000">- Update in SLE-15 (bsc#1209255, jsc#PED-3780)
- Add python-python-dateutil and python-jmespath to BuildRequires</changelog>
</package>
<package pkgid="b6d66060b7065a8f0ce4c85d6148307a3f5af0048fcf914f27cc2b758303e5b6" name="python-simplejson" arch="src">
  <version epoch="0" ver="3.17.2" rel="150300.3.2.3"/>
  <changelog author="benny.gaechter@gmail.com" date="1368014400">- Update to version 3.3.0
  * Unpaired surrogates once again pass through the decoder, to match older
    behavior and the RFC-4627 spec.
    https://github.com/simplejson/simplejson/issues/62</changelog>
  <changelog author="dmueller@suse.com" date="1382356800">- update to 3.3.1:
  * JSONDecodeError exceptions can now be pickled</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1400587200">- Update to 3.4.1
  * Fixed tests to run on Python 3.4
- Update to 3.4.0
  * Native setuptools support re-introduced
    https://github.com/simplejson/simplejson/pull/92
- Update to 3.3.3
  * Improve test suite's Python 3.4 compatibility
    https://github.com/simplejson/simplejson/issues/87
- Update to 3.3.2
  * Docstring fix for decoded string types
    https://github.com/simplejson/simplejson/pull/82</changelog>
  <changelog author="dmueller@suse.com" date="1401537600">- update to 3.5.2:
  * Fix Windows build with VS2008
  Version 3.5.1 released 2014-05-21
  * Consistently reject int_as_string_bitcount settings that are not
    positive integers
  Version 3.5.0 released 2014-05-20
  * Added int_as_string_bitcount encoder option
  * Fixed potential crash when encoder created with incorrect options</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="3709b7c1def9bc958917eb66a61cb78963f62c98ec2bd8739780f55babb9be85" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="93864082cddd6cb76365a4c39210c6adad89c5c1835ffcbb0daf234e01f561f3" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="a264488cbf82a20c6790a9332e30530da3ce4314259fb0276f76ce69521fbfb7" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="679c62e4d65fbee4bb3d6d65d739fc72ea9a452f320406e3da5ecaa36821c75c" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="553e421609d93103ddf558f265be4b072ed03cce8249920c5f7ecf0d138851bb" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="1cbc674ada21cf920f385ac9a48a673623a4412370fc5fcac8b1e2da5cf119c5" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="0402b49dd026dafd3b59efb0f7df16be97be83f39c3d3370dee939f96b824925" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="7cd185ef9c3d2b83b76f7ec2c3596510c7aac3442324ccd796d9cff7fb708852" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="bf23231acbfc0860ca92816a180d59be16c578d27670994a5a164fb7164a72ae" name="python3-audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="127a2f24207d3907be26790b58e6d583955a7d51b865ec88241a4848ba2d4e54" name="python3-audit" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="a65adaeac57258638b1934439e9c70bc12910c20ab9d6857e4e46f6be1938416" name="python3-audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="3ce67a0365c4883a8d18c041cbbbe88e1a72bb948ffa85050b716ffb9a7420aa" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="9751b94424c12ad2b1e550e009a5d83ea6c59454a32ee578f4fa6f16cf4e1979" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="43e29dd98605696ac217beb5fa63cba7784e954d15f142cc6533e1ab4ce3f8e7" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="ad3b1891de41a1651638196268490c0ac17c101c0e7acb4bb173d2dc35580386" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="ce51f61573ba0f7980b6eaf4c9c4cb2b5da3b7649abb4362b2ddb3d51a757511" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="b3c2043f8cb7670c70b1dcacc41ab26527123809352b89cdfc5dda10c897fa29" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="7410ea015617352f4f49a364a3a4c73e6d4b81a959bfcea7cb3b8bf41c6c6d6c" name="python3-botocore" arch="noarch">
  <version epoch="0" ver="1.29.89" rel="150200.37.14.1"/>
  <changelog author="dmueller@suse.com" date="1665576000">- drop remove-six.patch, rejected by upstream and breaks
  all dependent projects of botocore</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666008000">- Update to 1.27.91
  * api-change:``mediaconvert``: MediaConvert now supports specifying the minimum percentage of the
    HRD buffer available at the end of each encoded video segment.
- from version 1.27.90
  * api-change:``amplifyuibuilder``: We are releasing the ability for fields to be configured as
    arrays.
  * api-change:``appflow``: With this update, you can choose which Salesforce API is used by Amazon
    AppFlow to transfer data to or from your Salesforce account. You can choose the Salesforce REST API
    or Bulk API 2.0. You can also choose for Amazon AppFlow to pick the API automatically.
  * api-change:``connect``: This release adds support for a secondary email and a mobile number for
    Amazon Connect instance users.
  * api-change:``ds``: This release adds support for describing and updating AWS Managed Microsoft AD
    set up.
  * api-change:``ecs``: Documentation update to address tickets.
  * api-change:``guardduty``: Add UnprocessedDataSources to CreateDetectorResponse which specifies
    the data sources that couldn't be enabled during the CreateDetector request. In addition, update
    documentations.
  * api-change:``iam``: Documentation updates for the AWS Identity and Access Management API
    Reference.
  * api-change:``iotfleetwise``: Documentation update for AWS IoT FleetWise
  * api-change:``medialive``: AWS Elemental MediaLive now supports forwarding SCTE-35 messages
    through the Event Signaling and Management (ESAM) API, and can read those SCTE-35 messages from an
    inactive source.
  * api-change:``mediapackage-vod``: This release adds SPEKE v2 support for MediaPackage VOD. Speke
    v2 is an upgrade to the existing SPEKE API to support multiple encryption keys, based on an
    encryption contract selected by the customer.
  * api-change:``panorama``: Pause and resume camera stream processing with
    SignalApplicationInstanceNodeInstances. Reboot an appliance with CreateJobForDevices. More
    application state information in DescribeApplicationInstance response.
  * api-change:``rds-data``: Doc update to reflect no support for schema parameter on
    BatchExecuteStatement API
  * api-change:``ssm-incidents``: Update RelatedItem enum to support Tasks
  * api-change:``ssm``: Support of AmazonLinux2022 by Patch Manager
  * api-change:``transfer``: This release adds an option for customers to configure workflows that
    are triggered when files are only partially received from a client due to premature session
    disconnect.
  * api-change:``translate``: This release enables customers to specify multiple target languages in
    asynchronous batch translation requests.
  * api-change:``wisdom``: This release updates the GetRecommendations API to include a trigger event
    list for classifying and grouping recommendations.
- from version 1.27.89
  * api-change:``codeguru-reviewer``: Documentation update to replace broken link.
  * api-change:``elbv2``: Update elbv2 client to latest version
  * api-change:``greengrassv2``: This release adds error status details for deployments and
    components that failed on a device and adds features to improve visibility into component
    installation.
  * api-change:``quicksight``: Amazon QuickSight now supports SecretsManager Secret ARN in place of
    CredentialPair for DataSource creation and update. This release also has some minor documentation
    updates and removes CountryCode as a required parameter in GeoSpatialColumnGroup
- from version 1.27.88
  * api-change:``resiliencehub``: Documentation change for AWS Resilience Hub. Doc-only update to fix
    Documentation layout
- from version 1.27.87
  * api-change:``glue``: This SDK release adds support to sync glue jobs with source control
    provider. Additionally, a new parameter called SourceControlDetails will be added to Job model.
  * api-change:``network-firewall``: StreamExceptionPolicy configures how AWS Network Firewall
    processes traffic when a network connection breaks midstream
  * api-change:``outposts``: This release adds the Asset state information to the ListAssets
    response. The ListAssets request supports filtering on Asset state.
- from version 1.27.86
  * api-change:``connect``: Updated the CreateIntegrationAssociation API to support the CASES_DOMAIN
    IntegrationType.
  * api-change:``connectcases``: This release adds APIs for Amazon Connect Cases. Cases allows your
    agents to quickly track and manage customer issues that require multiple interactions, follow-up
    tasks, and teams in your contact center.  For more information, see
    https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
  * api-change:``ec2``: Added EnableNetworkAddressUsageMetrics flag for ModifyVpcAttribute,
    DescribeVpcAttribute APIs.
  * api-change:``ecs``: Documentation updates to address various Amazon ECS tickets.
  * api-change:``s3control``: S3 Object Lambda adds support to allow customers to intercept
    HeadObject and ListObjects requests and introduce their own compute. These requests were previously
    proxied to S3.
  * api-change:``workmail``: This release adds support for impersonation roles in Amazon WorkMail.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666267200">- Remove version constraint for python-pytest in BuildRequires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666699200">- Update to 1.28.0
  * feature:Endpoints: Implemented new endpoint ruleset system to dynamically derive endpoints and
    settings for services
  * api-change:``acm-pca``: AWS Private Certificate Authority (AWS Private CA) now offers usage modes
    which are combination of features to address specific use cases.
  * api-change:``batch``: This release adds support for AWS Batch on Amazon EKS.
  * api-change:``datasync``: Added support for self-signed certificates when using object storage
    locations; added BytesCompressed to the TaskExecution response.
  * api-change:``sagemaker``: SageMaker Inference Recommender now supports a new API
    ListInferenceRecommendationJobSteps to return the details of all the benchmark we create for an
    inference recommendation job.
- from version 1.27.96
  * api-change:``cognito-idp``: This release adds a new "DeletionProtection" field to the UserPool in
    Cognito. Application admins can configure this value with either ACTIVE or INACTIVE value. Setting
    this field to ACTIVE will prevent a user pool from accidental deletion.
  * api-change:``sagemaker``: CreateInferenceRecommenderjob API now supports passing endpoint details
    directly, that will help customers to identify the max invocation and max latency they can achieve
    for their model and the associated endpoint along with getting recommendations on other instances.
- from version 1.27.95
  * api-change:``devops-guru``: This release adds information about the resources DevOps Guru is
    analyzing.
  * api-change:``globalaccelerator``: Global Accelerator now supports AddEndpoints and
    RemoveEndpoints operations for standard endpoint groups.
  * api-change:``resiliencehub``: In this release, we are introducing support for regional
    optimization for AWS Resilience Hub applications. It also includes a few documentation updates to
    improve clarity.
  * api-change:``rum``: CloudWatch RUM now supports Extended CloudWatch Metrics with Additional
    Dimensions
- from version 1.27.94
  * api-change:``chime-sdk-messaging``: Documentation updates for Chime Messaging SDK
  * api-change:``cloudtrail``: This release includes support for exporting CloudTrail Lake query
    results to an Amazon S3 bucket.
  * api-change:``config``: This release adds resourceType enums for AppConfig, AppSync, DataSync,
    EC2, EKS, Glue, GuardDuty, SageMaker, ServiceDiscovery, SES, Route53 types.
  * api-change:``connect``: This release adds API support for managing phone numbers that can be used
    across multiple AWS regions through telephony traffic distribution.
  * api-change:``events``: Update events client to latest version
  * api-change:``managedblockchain``: Adding new Accessor APIs for Amazon Managed Blockchain
  * api-change:``s3``: Updates internal logic for constructing API endpoints. We have added
    rule-based endpoints and internal model parameters.
  * api-change:``s3control``: Updates internal logic for constructing API endpoints. We have added
    rule-based endpoints and internal model parameters.
  * api-change:``support-app``: This release adds the RegisterSlackWorkspaceForOrganization API. You
    can use the API to register a Slack workspace for an AWS account that is part of an organization.
  * api-change:``workspaces-web``: WorkSpaces Web now supports user access logging for recording
    session start, stop, and URL navigation.
- from version 1.27.93
  * api-change:``frauddetector``: Documentation Updates for Amazon Fraud Detector
  * api-change:``sagemaker``: This change allows customers to enable data capturing while running a
    batch transform job, and configure monitoring schedule to monitoring the captured data.
  * api-change:``servicediscovery``: Updated the ListNamespaces API to support the NAME and HTTP_NAME
    filters, and the BEGINS_WITH filter condition.
  * api-change:``sesv2``: This release allows subscribers to enable Dedicated IPs (managed) to send
    email via a fully managed dedicated IP experience. It also adds identities' VerificationStatus in
    the response of GetEmailIdentity and ListEmailIdentities APIs, and ImportJobs counts in the
    response of ListImportJobs API.
- from version 1.27.92
  * api-change:``greengrass``: This change allows customers to specify FunctionRuntimeOverride in
    FunctionDefinitionVersion. This configuration can be used if the runtime on the device is different
    from the AWS Lambda runtime specified for that function.
  * api-change:``sagemaker``: This release adds support for C7g, C6g, C6gd, C6gn, M6g, M6gd, R6g, and
    R6gn Graviton instance types in Amazon SageMaker Inference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667476800">- Update in SLE-15 (bsc#1204537, jsc#PED-2333)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667563200">- Update to 1.29.2
  * api-change:``memorydb``: Adding support for r6gd instances for MemoryDB Redis with data tiering.
    In a cluster with data tiering enabled, when available memory capacity is exhausted, the least
    recently used data is automatically tiered to solid state drives for cost-effective capacity
    scaling with minimal performance impact.
  * api-change:``sagemaker``: Amazon SageMaker now supports running training jobs on ml.trn1 instance
    types.
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- from version 1.29.1
  * api-change:``iotsitewise``: This release adds the ListAssetModelProperties and
    ListAssetProperties APIs. You can list all properties that belong to a single asset model or asset
    using these two new APIs.
  * api-change:``s3control``: S3 on Outposts launches support for Lifecycle configuration for
    Outposts buckets. With S3 Lifecycle configuration, you can mange objects so they are stored cost
    effectively. You can manage objects using size-based rules and specify how many noncurrent versions
    bucket will retain.
  * api-change:``sagemaker``: This release updates Framework model regex for ModelPackage to support
    new Framework version xgboost, sklearn.
  * api-change:``ssm-incidents``: Adds support for tagging replication-set on creation.
- from version 1.29.0
  * feature:Endpoints: Migrate all services to use new AWS Endpoint Resolution framework
  * Enhancement:Endpoints: Discontinued use of `sslCommonName` hosts as detailed in 1.27.0 (see
    `#2705 &lt;https://github.com/boto/botocore/issues/2705&gt;`__ for more info)
  * api-change:``rds``: Relational Database Service - This release adds support for configuring
    Storage Throughput on RDS database instances.
  * api-change:``textract``: Add ocr results in AnalyzeIDResponse as blocks
- from version 1.28.5
  * api-change:``apprunner``: This release adds support for private App Runner services. Services may
    now be configured to be made private and only accessible from a VPC. The changes include a new
    VpcIngressConnection resource and several new and modified APIs.
  * api-change:``connect``: Amazon connect now support a new API DismissUserContact to dismiss or
    remove terminated contacts in Agent CCP
  * api-change:``ec2``: Elastic IP transfer is a new Amazon VPC feature that allows you to transfer
    your Elastic IP addresses from one AWS Account to another.
  * api-change:``iot``: This release adds the Amazon Location action to IoT Rules Engine.
  * api-change:``logs``: SDK release to support tagging for destinations and log groups with
    TagResource. Also supports tag on create with PutDestination.
  * api-change:``sesv2``: This release includes support for interacting with the Virtual
    Deliverability Manager, allowing you to opt in/out of the feature and to retrieve recommendations
    and metric data.
  * api-change:``textract``: This release introduces additional support for 30+ normalized fields
    such as vendor address and currency. It also includes OCR output in the response and accuracy
    improvements for the already supported fields in previous version
- from version 1.28.4
  * api-change:``apprunner``: AWS App Runner adds .NET 6, Go 1, PHP 8.1 and Ruby 3.1 runtimes.
  * api-change:``appstream``: This release includes CertificateBasedAuthProperties in
    CreateDirectoryConfig and UpdateDirectoryConfig.
  * api-change:``cloud9``: Update to the documentation section of the Cloud9 API Reference guide.
  * api-change:``cloudformation``: This release adds more fields to improves visibility of AWS
    CloudFormation StackSets information in following APIs: ListStackInstances, DescribeStackInstance,
    ListStackSetOperationResults, ListStackSetOperations, DescribeStackSetOperation.
  * api-change:``gamesparks``: Add LATEST as a possible GameSDK Version on snapshot
  * api-change:``mediatailor``: This release introduces support for SCTE-35 segmentation descriptor
    messages which can be sent within time signal messages.
- from version 1.28.3
  * api-change:``ec2``: Feature supports the replacement of instance root volume using an updated AMI
    without requiring customers to stop their instance.
  * api-change:``fms``: Add support NetworkFirewall Managed Rule Group Override flag in
    GetViolationDetails API
  * api-change:``glue``: Added support for custom datatypes when using custom csv classifier.
  * api-change:``redshift``: This release clarifies use for the ElasticIp parameter of the
    CreateCluster and RestoreFromClusterSnapshot APIs.
  * api-change:``sagemaker``: This change allows customers to provide a custom entrypoint script for
    the docker container to be run while executing training jobs, and provide custom arguments to the
    entrypoint script.
  * api-change:``wafv2``: This release adds the following: Challenge rule action, to silently verify
    client browsers; rule group rule action override to any valid rule action, not just Count; token
    sharing between protected applications for challenge/CAPTCHA token; targeted rules option for Bot
    Control managed rule group.
- from version 1.28.2
  * api-change:``iam``: Doc only update that corrects instances of CLI not using an entity.
  * api-change:``kafka``: This release adds support for Tiered Storage. UpdateStorage allows you to
    control the Storage Mode for supported storage tiers.
  * api-change:``neptune``: Added a new cluster-level attribute to set the capacity range for Neptune
    Serverless instances.
  * api-change:``sagemaker``: Amazon SageMaker Automatic Model Tuning now supports specifying Grid
    Search strategy for tuning jobs, which evaluates all hyperparameter combinations exhaustively based
    on the categorical hyperparameters provided.
- from version 1.28.1
  * api-change:``accessanalyzer``: This release adds support for six new resource types in IAM Access
    Analyzer to help you easily identify public and cross-account access to your AWS resources. Updated
    service API, documentation, and paginators.
  * api-change:``location``: Added new map styles with satellite imagery for map resources using HERE
    as a data provider.
  * api-change:``mediatailor``: This release is a documentation update
  * api-change:``rds``: Relational Database Service - This release adds support for exporting DB
    cluster data to Amazon S3.
  * api-change:``workspaces``: This release adds new enums for supporting Workspaces Core features,
    including creating Manual running mode workspaces, importing regular Workspaces Core images and
    importing g4dn Workspaces Core images.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1668427200">- Update to 1.29.8
  * api-change:``glue``: Added links related to enabling job bookmarks.
  * api-change:``iot``: This release add new api listRelatedResourcesForAuditFinding and new member
    type IssuerCertificates for Iot device device defender Audit.
  * api-change:``license-manager``: AWS License Manager now supports onboarded Management Accounts or
    Delegated Admins to view granted licenses aggregated from all accounts in the organization.
  * api-change:``marketplace-catalog``: Added three new APIs to support tagging and tag-based
    authorization: TagResource, UntagResource, and ListTagsForResource. Added optional parameters to
    the StartChangeSet API to support tagging a resource while making a request to create it.
  * api-change:``rekognition``: Adding support for ImageProperties feature to detect dominant colors
    and image brightness, sharpness, and contrast, inclusion and exclusion filters for labels and label
    categories, new fields to the API response, "aliases" and "categories"
  * api-change:``securityhub``: Documentation updates for Security Hub
  * api-change:``ssm-incidents``: RelatedItems now have an ID field which can be used for referencing
    them else where. Introducing event references in TimelineEvent API and increasing maximum length of
    "eventData" to 12K characters.
- from version 1.29.7
  * api-change:``autoscaling``: This release adds a new price capacity optimized allocation strategy
    for Spot Instances to help customers optimize provisioning of Spot Instances via EC2 Auto Scaling,
    EC2 Fleet, and Spot Fleet. It allocates Spot Instances based on both spare capacity availability
    and Spot Instance price.
  * api-change:``ec2``: This release adds a new price capacity optimized allocation strategy for Spot
    Instances to help customers optimize provisioning of Spot Instances via EC2 Auto Scaling, EC2
    Fleet, and Spot Fleet. It allocates Spot Instances based on both spare capacity availability and
    Spot Instance price.
  * api-change:``ecs``: This release adds support for task scale-in protection with
    updateTaskProtection and getTaskProtection APIs. UpdateTaskProtection API can be used to protect a
    service managed task from being terminated by scale-in events and getTaskProtection API to get the
    scale-in protection status of a task.
  * api-change:``es``: Amazon OpenSearch Service now offers managed VPC endpoints to connect to your
    Amazon OpenSearch Service VPC-enabled domain in a Virtual Private Cloud (VPC). This feature allows
    you to privately access OpenSearch Service domain without using public IPs or requiring traffic to
    traverse the Internet.
  * api-change:``resource-explorer-2``: Text only updates to some Resource Explorer descriptions.
  * api-change:``scheduler``: AWS introduces the new Amazon EventBridge Scheduler. EventBridge
    Scheduler is a serverless scheduler that allows you to create, run, and manage tasks from one
    central, managed service.
- from version 1.29.6
  * api-change:``connect``: This release adds new fields SignInUrl, UserArn, and UserId to
    GetFederationToken response payload.
  * api-change:``connectcases``: This release adds the ability to disable templates through the
    UpdateTemplate API. Disabling templates prevents customers from creating cases using the template.
    For more information see https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
  * api-change:``ec2``: Amazon EC2 Trn1 instances, powered by AWS Trainium chips, are purpose built
    for high-performance deep learning training. u-24tb1.112xlarge and u-18tb1.112xlarge High Memory
    instances are purpose-built to run large in-memory databases.
  * api-change:``groundstation``: This release adds the preview of customer-provided ephemeris
    support for AWS Ground Station, allowing space vehicle owners to provide their own position and
    trajectory information for a satellite.
  * api-change:``mediapackage-vod``: This release adds "IncludeIframeOnlyStream" for Dash endpoints.
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- from version 1.29.5
  * api-change:``acm``: Support added for requesting elliptic curve certificate key algorithm types
    P-256 (EC_prime256v1) and P-384 (EC_secp384r1).
  * api-change:``billingconductor``: This release adds the Recurring Custom Line Item feature along
    with a new API ListCustomLineItemVersions.
  * api-change:``ec2``: This release enables sharing of EC2 Placement Groups across accounts and
    within AWS Organizations using Resource Access Manager
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
  * api-change:``fms``: AWS Firewall Manager now supports importing existing AWS Network Firewall
    firewalls into Firewall Manager policies.
  * api-change:``lightsail``: This release adds support for Amazon Lightsail to automate the
    delegation of domains registered through Amazon Route 53 to Lightsail DNS management and to
    automate record creation for DNS validation of Lightsail SSL/TLS certificates.
  * api-change:``opensearch``: Amazon OpenSearch Service now offers managed VPC endpoints to connect
    to your Amazon OpenSearch Service VPC-enabled domain in a Virtual Private Cloud (VPC). This feature
    allows you to privately access OpenSearch Service domain without using public IPs or requiring
    traffic to traverse the Internet.
  * api-change:``polly``: Amazon Polly adds new voices: Elin (sv-SE), Ida (nb-NO), Laura (nl-NL) and
    Suvi (fi-FI). They are available as neural voices only.
  * api-change:``resource-explorer-2``: This is the initial SDK release for AWS Resource Explorer.
    AWS Resource Explorer lets your users search for and discover your AWS resources across the AWS
    Regions in your account.
  * api-change:``route53``: Amazon Route 53 now supports the Europe (Zurich) Region (eu-central-2)
    for latency records, geoproximity records, and private DNS for Amazon VPCs in that region.
- from version 1.29.4
  * api-change:``athena``: Adds support for using Query Result Reuse
  * api-change:``autoscaling``: This release adds support for two new attributes for attribute-based
    instance type selection - NetworkBandwidthGbps and AllowedInstanceTypes.
  * api-change:``cloudtrail``: This release includes support for configuring a delegated
    administrator to manage an AWS Organizations organization CloudTrail trails and event data stores,
    and AWS Key Management Service encryption of CloudTrail Lake event data stores.
  * api-change:``ec2``: This release adds support for two new attributes for attribute-based instance
    type selection - NetworkBandwidthGbps and AllowedInstanceTypes.
  * api-change:``elasticache``: Added support for IPv6 and dual stack for Memcached and Redis
    clusters. Customers can now launch new Redis and Memcached clusters with IPv6 and dual stack
    networking support.
  * api-change:``lexv2-models``: Update lexv2-models client to latest version
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added support for setting the
    SDR reference white point for HDR conversions and conversion of HDR10 to DolbyVision without
    mastering metadata.
  * api-change:``ssm``: This release includes support for applying a CloudWatch alarm to multi
    account multi region Systems Manager Automation
  * api-change:``wafv2``: The geo match statement now adds labels for country and region. You can
    match requests at the region level by combining a geo match statement with label match statements.
  * api-change:``wellarchitected``: This release adds support for integrations with AWS Trusted
    Advisor and AWS Service Catalog AppRegistry to improve workload discovery and speed up your
    workload reviews.
  * api-change:``workspaces``: This release adds protocols attribute to workspaces properties data
    type. This enables customers to migrate workspaces from PC over IP (PCoIP) to WorkSpaces Streaming
    Protocol (WSP) using create and modify workspaces public APIs.
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- from version 1.29.3
  * api-change:``ec2``: This release adds API support for the recipient of an AMI account share to
    remove shared AMI launch permissions.
  * api-change:``emr-containers``: Adding support for Job templates. Job templates allow you to
    create and store templates to configure Spark applications parameters. This helps you ensure
    consistent settings across applications by reusing and enforcing configuration overrides in data
    pipelines.
  * api-change:``logs``: Doc-only update for bug fixes and support of export to buckets encrypted
    with SSE-KMS
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- Add psuffix on the name to have the multibuild flavor packages identify themselves by a different name</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669982400">- Update to 1.29.21
  * api-change:``codecatalyst``: This release adds operations that support customers using the AWS
    Toolkits and Amazon CodeCatalyst, a unified software development service that helps developers
    develop, deploy, and maintain applications in the cloud. For more information, see the
    documentation.
  * api-change:``comprehend``: Comprehend now supports semi-structured documents (such as PDF files
    or image files) as inputs for custom analysis using the synchronous APIs (ClassifyDocument and
    DetectEntities).
  * api-change:``gamelift``: GameLift introduces a new feature, GameLift Anywhere. GameLift Anywhere
    allows you to integrate your own compute resources with GameLift. You can also use GameLift
    Anywhere to iteratively test your game servers without uploading the build to GameLift for every
    iteration.
  * api-change:``pipes``: AWS introduces new Amazon EventBridge Pipes which allow you to connect
    sources (SQS, Kinesis, DDB, Kafka, MQ) to Targets (14+ EventBridge Targets) without any code, with
    filtering, batching, input transformation, and an optional Enrichment stage (Lambda, StepFunctions,
    ApiGateway, ApiDestinations)
  * api-change:``stepfunctions``: Update stepfunctions client to latest version
- from version 1.29.20
  * api-change:``accessanalyzer``: This release adds support for S3 cross account access points. IAM
    Access Analyzer will now produce public or cross account findings when it detects bucket delegation
    to external account access points.
  * api-change:``athena``: This release includes support for using Apache Spark in Amazon Athena.
  * api-change:``dataexchange``: This release enables data providers to license direct access to data
    in their Amazon S3 buckets or AWS Lake Formation data lakes through AWS Data Exchange. Subscribers
    get read-only access to the data and can use it in downstream AWS services, like Amazon Athena,
    without creating or managing copies.
  * api-change:``docdb-elastic``: Launched Amazon DocumentDB Elastic Clusters. You can now use the
    SDK to create, list, update and delete Amazon DocumentDB Elastic Cluster resources
  * api-change:``glue``: This release adds support for AWS Glue Data Quality, which helps you
    evaluate and monitor the quality of your data and includes the API for creating, deleting, or
    updating data quality rulesets, runs and evaluations.
  * api-change:``s3control``: Amazon S3 now supports cross-account access points. S3 bucket owners
    can now allow trusted AWS accounts to create access points associated with their bucket.
  * api-change:``sagemaker-geospatial``: This release provides Amazon SageMaker geospatial APIs to
    build, train, deploy and visualize geospatial models.
  * api-change:``sagemaker``: Added Models as part of the Search API. Added Model shadow deployments
    in realtime inference, and shadow testing in managed inference. Added support for shared spaces,
    geospatial APIs, Model Cards, AutoMLJobStep in pipelines, Git repositories on user profiles and
    domains, Model sharing in Jumpstart.
- from version 1.29.19
  * api-change:``ec2``: This release adds support for AWS Verified Access and the Hpc6id Amazon EC2
    compute optimized instance type, which features 3rd generation Intel Xeon Scalable processors.
  * api-change:``firehose``: Allow support for the Serverless offering for Amazon OpenSearch Service
    as a Kinesis Data Firehose delivery destination.
  * api-change:``kms``: AWS KMS introduces the External Key Store (XKS), a new feature for customers
    who want to protect their data with encryption keys stored in an external key management system
    under their control.
  * api-change:``omics``: Amazon Omics is a new, purpose-built service that can be used by healthcare
    and life science organizations to store, query, and analyze omics data. The insights from that data
    can be used to accelerate scientific discoveries and improve healthcare.
  * api-change:``opensearchserverless``: Publish SDK for Amazon OpenSearch Serverless
  * api-change:``securitylake``: Amazon Security Lake automatically centralizes security data from
    cloud, on-premises, and custom sources into a purpose-built data lake stored in your account.
    Security Lake makes it easier to analyze security data, so you can improve the protection of your
    workloads, applications, and data
  * api-change:``simspaceweaver``: AWS SimSpace Weaver is a new service that helps customers build
    spatial simulations at new levels of scale - resulting in virtual worlds with millions of dynamic
    entities. See the AWS SimSpace Weaver developer guide for more details on how to get started.
    https://docs.aws.amazon.com/simspaceweaver
- from version 1.29.18
  * api-change:``arc-zonal-shift``: Amazon Route 53 Application Recovery Controller Zonal Shift is a
    new service that makes it easy to shift traffic away from an Availability Zone in a Region. See the
    developer guide for more information:
    https://docs.aws.amazon.com/r53recovery/latest/dg/what-is-route53-recovery.html
  * api-change:``compute-optimizer``: Adds support for a new recommendation preference that makes it
    possible for customers to optimize their EC2 recommendations by utilizing an external metrics
    ingestion service to provide metrics.
  * api-change:``config``: With this release, you can use AWS Config to evaluate your resources for
    compliance with Config rules before they are created or updated. Using Config rules in proactive
    mode enables you to test and build compliant resource templates or check resource configurations at
    the time they are provisioned.
  * api-change:``ec2``: Introduces ENA Express, which uses AWS SRD and dynamic routing to increase
    throughput and minimize latency, adds support for trust relationships between Reachability Analyzer
    and AWS Organizations to enable cross-account analysis, and adds support for Infrastructure
    Performance metric subscriptions.
  * api-change:``eks``: Adds support for additional EKS add-ons metadata and filtering fields
  * api-change:``fsx``: This release adds support for 4GB/s / 160K PIOPS FSx for ONTAP file systems
    and 10GB/s / 350K PIOPS FSx for OpenZFS file systems (Single_AZ_2). For FSx for ONTAP, this also
    adds support for DP volumes, snapshot policy, copy tags to backups, and Multi-AZ route table
    updates.
  * api-change:``glue``: This release allows the creation of Custom Visual Transforms (Dynamic
    Transforms) to be created via AWS Glue CLI/SDK.
  * api-change:``inspector2``: This release adds support for Inspector to scan AWS Lambda.
  * api-change:``lambda``: Adds support for Lambda SnapStart, which helps improve the startup
    performance of functions. Customers can now manage SnapStart based functions via CreateFunction and
    UpdateFunctionConfiguration APIs
  * api-change:``license-manager-user-subscriptions``: AWS now offers fully-compliant,
    Amazon-provided licenses for Microsoft Office Professional Plus 2021 Amazon Machine Images (AMIs)
    on Amazon EC2. These AMIs are now available on the Amazon EC2 console and on AWS Marketplace to
    launch instances on-demand without any long-term licensing commitments.
  * api-change:``macie2``: Added support for configuring Macie to continually sample objects from S3
    buckets and inspect them for sensitive data. Results appear in statistics, findings, and other data
    that Macie provides.
  * api-change:``quicksight``: This release adds new Describe APIs and updates Create and Update APIs
    to support the data model for Dashboards, Analyses, and Templates.
  * api-change:``s3control``: Added two new APIs to support Amazon S3 Multi-Region Access Point
    failover controls: GetMultiRegionAccessPointRoutes and SubmitMultiRegionAccessPointRoutes. The
    failover control APIs are supported in the following Regions: us-east-1, us-west-2, eu-west-1,
    ap-southeast-2, and ap-northeast-1.
  * api-change:``securityhub``: Adding StandardsManagedBy field to DescribeStandards API response
- from version 1.29.17
  * api-change:``backup``: AWS Backup introduces support for legal hold and application stack
    backups. AWS Backup Audit Manager introduces support for cross-Region, cross-account reports.
  * api-change:``cloudwatch``: Update cloudwatch client to latest version
  * api-change:``drs``: Non breaking changes to existing APIs, and additional APIs added to support
    in-AWS failing back using AWS Elastic Disaster Recovery.
  * api-change:``ecs``: This release adds support for ECS Service Connect, a new capability that
    simplifies writing and operating resilient distributed applications. This release updates the
    TaskDefinition, Cluster, Service mutation APIs with Service connect constructs and also adds a new
    ListServicesByNamespace API.
  * api-change:``efs``: Update efs client to latest version
  * api-change:``iot-data``: This release adds support for MQTT5 properties to AWS IoT HTTP Publish
    API.
  * api-change:``iot``: Job scheduling enables the scheduled rollout of a Job with start and end
    times and a customizable end behavior when end time is reached. This is available for continuous
    and snapshot jobs. Added support for MQTT5 properties to AWS IoT TopicRule Republish Action.
  * api-change:``iotwireless``: This release includes a new feature for customers to calculate the
    position of their devices by adding three new APIs: UpdateResourcePosition, GetResourcePosition,
    and GetPositionEstimate.
  * api-change:``kendra``: Amazon Kendra now supports preview of table information from HTML tables
    in the search results. The most relevant cells with their corresponding rows, columns are displayed
    as a preview in the search result. The most relevant table cell or cells are also highlighted in
    table preview.
  * api-change:``logs``: Updates to support CloudWatch Logs data protection and CloudWatch
    cross-account observability
  * api-change:``mgn``: This release adds support for Application and Wave management. We also now
    support custom post-launch actions.
  * api-change:``oam``: Amazon CloudWatch Observability Access Manager is a new service that allows
    configuration of the CloudWatch cross-account observability feature.
  * api-change:``organizations``: This release introduces delegated administrator for AWS
    Organizations, a new feature to help you delegate the management of your Organizations policies,
    enabling you to govern your AWS organization in a decentralized way. You can now allow member
    accounts to manage Organizations policies.
  * api-change:``rds``: This release enables new Aurora and RDS feature called Blue/Green Deployments
    that makes updates to databases safer, simpler and faster.
  * api-change:``textract``: This release adds support for classifying and splitting lending
    documents by type, and extracting information by using the Analyze Lending APIs. This release also
    includes support for summarized information of the processed lending document package, in addition
    to per document results.
  * api-change:``transcribe``: This release adds support for 'inputType' for post-call and real-time
    (streaming) Call Analytics within Amazon Transcribe.
- from version 1.29.16
  * api-change:``grafana``: This release includes support for configuring a Grafana workspace to
    connect to a datasource within a VPC as well as new APIs for configuring Grafana settings.
  * api-change:``rbin``: This release adds support for Rule Lock for Recycle Bin, which allows you to
    lock retention rules so that they can no longer be modified or deleted.
- from version 1.29.15
  * bugfix:Endpoints: Resolve endpoint with default partition when no region is set
  * bugfix:s3: fixes missing x-amz-content-sha256 header for s3 object lambda
  * api-change:``appflow``: Adding support for Amazon AppFlow to transfer the data to Amazon Redshift
    databases through Amazon Redshift Data API service. This feature will support the Redshift
    destination connector on both public and private accessible Amazon Redshift Clusters and Amazon
    Redshift Serverless.
  * api-change:``kinesisanalyticsv2``: Support for Apache Flink 1.15 in Kinesis Data Analytics.
- from version 1.29.14
  * api-change:``route53``: Amazon Route 53 now supports the Asia Pacific (Hyderabad) Region
    (ap-south-2) for latency records, geoproximity records, and private DNS for Amazon VPCs in that
    region.
- from version 1.29.13
  * api-change:``appflow``: AppFlow provides a new API called UpdateConnectorRegistration to update a
    custom connector that customers have previously registered. With this API, customers no longer need
    to unregister and then register a connector to make an update.
  * api-change:``auditmanager``: This release introduces a new feature for Audit Manager: Evidence
    finder. You can now use evidence finder to quickly query your evidence, and add the matching
    evidence results to an assessment report.
  * api-change:``chime-sdk-voice``: Amazon Chime Voice Connector, Voice Connector Group and PSTN
    Audio Service APIs are now available in the Amazon Chime SDK Voice namespace. See
    https://docs.aws.amazon.com/chime-sdk/latest/dg/sdk-available-regions.html for more details.
  * api-change:``cloudfront``: CloudFront API support for staging distributions and associated
    traffic management policies.
  * api-change:``connect``: Added AllowedAccessControlTags and TagRestrictedResource for Tag Based
    Access Control on Amazon Connect Webpage
  * api-change:``dynamodb``: Updated minor fixes for DynamoDB documentation.
  * api-change:``dynamodbstreams``: Update dynamodbstreams client to latest version
  * api-change:``ec2``: This release adds support for copying an Amazon Machine Image's tags when
    copying an AMI.
  * api-change:``glue``: AWSGlue Crawler - Adding support for Table and Column level Comments with
    database level datatypes for JDBC based crawler.
  * api-change:``iot-roborunner``: AWS IoT RoboRunner is a new service that makes it easy to build
    applications that help multi-vendor robots work together seamlessly. See the IoT RoboRunner
    developer guide for more details on getting started.
    https://docs.aws.amazon.com/iotroborunner/latest/dev/iotroborunner-welcome.html
  * api-change:``quicksight``: This release adds the following: 1) Asset management for centralized
    assets governance 2) QuickSight Q now supports public embedding 3) New Termination protection flag
    to mitigate accidental deletes 4) Athena data sources now accept a custom IAM role 5) QuickSight
    supports connectivity to Databricks
  * api-change:``sagemaker``: Added DisableProfiler flag as a new field in ProfilerConfig
  * api-change:``servicecatalog``: This release 1. adds support for Principal Name Sharing with
    Service Catalog portfolio sharing. 2. Introduces repo sourced products which are created and
    managed with existing SC APIs. These products are synced to external repos and auto create new
    product versions based on changes in the repo.
  * api-change:``ssm-sap``: AWS Systems Manager for SAP provides simplified operations and management
    of SAP applications such as SAP HANA. With this release, SAP customers and partners can automate
    and simplify their SAP system administration tasks such as backup/restore of SAP HANA.
  * api-change:``stepfunctions``: Update stepfunctions client to latest version
  * api-change:``transfer``: Adds a NONE encryption algorithm type to AS2 connectors, providing
    support for skipping encryption of the AS2 message body when a HTTPS URL is also specified.
- from version 1.29.12
  * api-change:``amplify``: Adds a new value (WEB_COMPUTE) to the Platform enum that allows customers
    to create Amplify Apps with Server-Side Rendering support.
  * api-change:``appflow``: AppFlow simplifies the preparation and cataloging of SaaS data into the
    AWS Glue Data Catalog where your data can be discovered and accessed by AWS analytics and ML
    services. AppFlow now also supports data field partitioning and file size optimization to improve
    query performance and reduce cost.
  * api-change:``appsync``: This release introduces the APPSYNC_JS runtime, and adds support for
    JavaScript in AppSync functions and AppSync pipeline resolvers.
  * api-change:``dms``: Adds support for Internet Protocol Version 6 (IPv6) on DMS Replication
    Instances
  * api-change:``ec2``: This release adds a new optional parameter "privateIpAddress" for the
    CreateNatGateway API. PrivateIPAddress will allow customers to select a custom Private IPv4 address
    instead of having it be auto-assigned.
  * api-change:``elbv2``: Update elbv2 client to latest version
  * api-change:``emr-serverless``: Adds support for AWS Graviton2 based applications. You can now
    select CPU architecture when creating new applications or updating existing ones.
  * api-change:``ivschat``: Adds LoggingConfiguration APIs for IVS Chat - a feature that allows
    customers to store and record sent messages in a chat room to S3 buckets, CloudWatch logs, or
    Kinesis firehose.
  * api-change:``lambda``: Add Node 18 (nodejs18.x) support to AWS Lambda.
  * api-change:``personalize``: This release provides support for creation and use of metric
    attributions in AWS Personalize
  * api-change:``polly``: Add two new neural voices - Ola (pl-PL) and Hala (ar-AE).
  * api-change:``rum``: CloudWatch RUM now supports custom events. To use custom events, create an
    app monitor or update an app monitor with CustomEvent Status as ENABLED.
  * api-change:``s3control``: Added 34 new S3 Storage Lens metrics to support additional customer use
    cases.
  * api-change:``secretsmanager``: Documentation updates for Secrets Manager.
  * api-change:``securityhub``: Added SourceLayerArn and SourceLayerHash field for security findings.
    Updated AwsLambdaFunction Resource detail
  * api-change:``servicecatalog-appregistry``: This release adds support for tagged resource
    associations, which allows you to associate a group of resources with a defined resource tag key
    and value to the application.
  * api-change:``sts``: Documentation updates for AWS Security Token Service.
  * api-change:``textract``: This release adds support for specifying and extracting information from
    documents using the Signatures feature within Analyze Document API
  * api-change:``workspaces``: The release introduces CreateStandbyWorkspaces, an API that allows you
    to create standby WorkSpaces associated with a primary WorkSpace in another Region.
    DescribeWorkspaces now includes related WorkSpaces properties. DescribeWorkspaceBundles and
    CreateWorkspaceBundle now return more bundle details.
- from version 1.29.11
  * api-change:``batch``: Documentation updates related to Batch on EKS
  * api-change:``billingconductor``: This release adds a new feature BillingEntity pricing rule.
  * api-change:``cloudformation``: Added UnsupportedTarget HandlerErrorCode for use with CFN Resource
    Hooks
  * api-change:``comprehendmedical``: This release supports new set of entities and traits. It also
    adds new category (BEHAVIORAL_ENVIRONMENTAL_SOCIAL).
  * api-change:``connect``: This release adds a new MonitorContact API for initiating monitoring of
    ongoing Voice and Chat contacts.
  * api-change:``eks``: Adds support for customer-provided placement groups for Kubernetes control
    plane instances when creating local EKS clusters on Outposts
  * api-change:``elasticache``: for Redis now supports AWS Identity and Access Management
    authentication access to Redis clusters starting with redis-engine version 7.0
  * api-change:``iottwinmaker``: This release adds the following: 1) ExecuteQuery API allows users to
    query their AWS IoT TwinMaker Knowledge Graph 2) Pricing plan APIs allow users to configure and
    manage their pricing mode 3) Support for property groups and tabular property values in existing
    AWS IoT TwinMaker APIs.
  * api-change:``personalize-events``: This release provides support for creation and use of metric
    attributions in AWS Personalize
  * api-change:``proton``: Add support for sorting and filtering in ListServiceInstances
  * api-change:``rds``: This release adds support for container databases (CDBs) to Amazon RDS Custom
    for Oracle. A CDB contains one PDB at creation. You can add more PDBs using Oracle SQL. You can
    also customize your database installation by setting the Oracle base, Oracle home, and the OS user
    name and group.
  * api-change:``ssm-incidents``: Add support for PagerDuty integrations on ResponsePlan,
    IncidentRecord, and RelatedItem APIs
  * api-change:``ssm``: This release adds support for cross account access in CreateOpsItem,
    UpdateOpsItem and GetOpsItem. It introduces new APIs to setup resource policies for SSM resources:
    PutResourcePolicy, GetResourcePolicies and DeleteResourcePolicy.
  * api-change:``transfer``: Allow additional operations to throw ThrottlingException
  * api-change:``xray``: This release adds new APIs - PutResourcePolicy, DeleteResourcePolicy,
    ListResourcePolicies for supporting resource based policies for AWS X-Ray.
- from version 1.29.10
  * bugfix:s3: fixes missing x-amz-content-sha256 header for s3 on outpost
  * enhancement:sso: Add support for loading sso-session profiles from the aws config
  * api-change:``connect``: This release updates the APIs: UpdateInstanceAttribute,
    DescribeInstanceAttribute, and ListInstanceAttributes. You can use it to programmatically
    enable/disable enhanced contact monitoring using attribute type ENHANCED_CONTACT_MONITORING on the
    specified Amazon Connect instance.
  * api-change:``greengrassv2``: Adds new parent target ARN paramater to CreateDeployment,
    GetDeployment, and ListDeployments APIs for the new subdeployments feature.
  * api-change:``route53``: Amazon Route 53 now supports the Europe (Spain) Region (eu-south-2) for
    latency records, geoproximity records, and private DNS for Amazon VPCs in that region.
  * api-change:``workspaces``: This release introduces ModifyCertificateBasedAuthProperties, a new
    API that allows control of certificate-based auth properties associated with a WorkSpaces
    directory. The DescribeWorkspaceDirectories API will now additionally return certificate-based auth
    properties in its responses.
- from version 1.29.9
  * api-change:``customer-profiles``: This release enhances the SearchProfiles API by providing
    functionality to search for profiles using multiple keys and logical operators.
  * api-change:``lakeformation``: This release adds a new parameter "Parameters" in the
    DataLakeSettings.
  * api-change:``managedblockchain``: Updating the API docs data type: NetworkEthereumAttributes, and
    the operations DeleteNode, and CreateNode to also include the supported Goerli network.
  * api-change:``proton``: Add support for CodeBuild Provisioning
  * api-change:``rds``: This release adds support for restoring an RDS Multi-AZ DB cluster snapshot
    to a Single-AZ deployment or a Multi-AZ DB instance deployment.
  * api-change:``workdocs``: Added 2 new document related operations, DeleteDocumentVersion and
    RestoreDocumentVersions.
  * api-change:``xray``: This release enhances GetServiceGraph API to support new type of edge to
    represent links between SQS and Lambda in event-driven applications.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1670587200">- Update to 1.29.26
  * enhancement:Endpoint Provider Standard Library: Correct spelling of 'library' in
    ``StandardLibrary`` class
  * api-change:``autoscaling``: Adds support for metric math for target tracking scaling policies,
    saving you the cost and effort of publishing a custom metric to CloudWatch. Also adds support for
    VPC Lattice by adding the Attach/Detach/DescribeTrafficSources APIs and a new health check type to
    the CreateAutoScalingGroup API.
  * api-change:``iottwinmaker``: This release adds the following new features: 1) New APIs for
    managing a continuous sync of assets and asset models from AWS IoT SiteWise. 2) Support user
    friendly names for component types (ComponentTypeName) and properties (DisplayName).
  * api-change:``migrationhubstrategy``: This release adds known application filtering, server
    selection for assessments, support for potential recommendations, and indications for configuration
    and assessment status. For more information, see the AWS Migration Hub documentation at
    https://docs.aws.amazon.com/migrationhub/index.html
- from version 1.29.25
  * api-change:``ce``: This release adds the LinkedAccountName field to the GetAnomalies API response
    under RootCause
  * api-change:``cloudfront``: Introducing UpdateDistributionWithStagingConfig that can be used to
    promote the staging configuration to the production.
  * api-change:``eks``: Adds support for EKS add-ons configurationValues fields and
    DescribeAddonConfiguration function
  * api-change:``kms``: Updated examples and exceptions for External Key Store (XKS).
- from version 1.29.24
  * api-change:``billingconductor``: This release adds the Tiering Pricing Rule feature.
  * api-change:``connect``: This release provides APIs that enable you to programmatically manage
    rules for Contact Lens conversational analytics and third party applications. For more information,
    see   https://docs.aws.amazon.com/connect/latest/APIReference/rules-api.html
  * api-change:``dynamodb``: Endpoint Ruleset update: Use http instead of https for the "local"
    region.
  * api-change:``dynamodbstreams``: Update dynamodbstreams client to latest version
  * api-change:``rds``: This release adds the BlueGreenDeploymentNotFoundFault to the
    AddTagsToResource, ListTagsForResource, and RemoveTagsFromResource operations.
  * api-change:``sagemaker-featurestore-runtime``: For online + offline Feature Groups, added ability
    to target PutRecord and DeleteRecord actions to only online store, or only offline store. If target
    store parameter is not specified, actions will apply to both stores.
- from version 1.29.23
  * api-change:``ce``: This release introduces two new APIs that offer a 1-click experience to
    refresh Savings Plans recommendations. The two APIs are
    StartSavingsPlansPurchaseRecommendationGeneration and
    ListSavingsPlansPurchaseRecommendationGeneration.
  * api-change:``ec2``: Documentation updates for EC2.
  * api-change:``ivschat``: Adds PendingVerification error type to messaging APIs to block the
    resource usage for accounts identified as being fraudulent.
  * api-change:``rds``: This release adds the InvalidDBInstanceStateFault to the
    RestoreDBClusterFromSnapshot operation.
  * api-change:``transcribe``: Amazon Transcribe now supports creating custom language models in the
    following languages: Japanese (ja-JP) and German (de-DE).
- from version 1.29.22
  * api-change:``appsync``: Fixes the URI for the evaluatecode endpoint to include the /v1 prefix
    (ie. "/v1/dataplane-evaluatecode").
  * api-change:``ecs``: Documentation updates for Amazon ECS
  * api-change:``fms``: AWS Firewall Manager now supports Fortigate Cloud Native Firewall as a
    Service as a third-party policy type.
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added support for
    configurable ID3 eMSG box attributes and the ability to signal them with InbandEventStream tags in
    DASH and CMAF outputs.
  * api-change:``medialive``: Updates to Event Signaling and Management (ESAM) API and documentation.
  * api-change:``polly``: Add language code for Finnish (fi-FI)
  * api-change:``proton``: CreateEnvironmentAccountConnection RoleArn input is now optional
  * api-change:``redshift-serverless``: Add Table Level Restore operations for Amazon Redshift
    Serverless. Add multi-port support for Amazon Redshift Serverless endpoints. Add Tagging support to
    Snapshots and Recovery Points in Amazon Redshift Serverless.
  * api-change:``sns``: This release adds the message payload-filtering feature to the SNS Subscribe,
    SetSubscriptionAttributes, and GetSubscriptionAttributes API actions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1672660800">- Update to 1.29.41
  * api-change:``cloudfront``: Extend response headers policy to support removing headers from viewer
    responses
  * api-change:``iotfleetwise``: Update documentation - correct the epoch constant value of default
    value for expiryTime field in CreateCampaign request.
- from version 1.29.40
  * api-change:``apigateway``: Documentation updates for Amazon API Gateway
  * api-change:``emr``: Update emr client to latest version
  * api-change:``secretsmanager``: Added owning service filter, include planned deletion flag, and
    next rotation date response parameter in ListSecrets.
  * api-change:``wisdom``: This release extends Wisdom CreateContent and StartContentUpload APIs to
    support PDF and MicrosoftWord docx document uploading.
- from version 1.29.39
  * api-change:``elasticache``: This release allows you to modify the encryption in transit setting,
    for existing Redis clusters. You can now change the TLS configuration of your Redis clusters
    without the need to re-build or re-provision the clusters or impact application availability.
  * api-change:``network-firewall``: AWS Network Firewall now provides status messages for firewalls
    to help you troubleshoot when your endpoint fails.
  * api-change:``rds``: This release adds support for Custom Engine Version (CEV) on RDS Custom SQL
    Server.
  * api-change:``route53-recovery-control-config``: Added support for Python paginators in the
    route53-recovery-control-config List* APIs.
- from version 1.29.38
  * api-change:``memorydb``: This release adds support for MemoryDB Reserved nodes which provides a
    significant discount compared to on-demand node pricing. Reserved nodes are not physical nodes, but
    rather a billing discount applied to the use of on-demand nodes in your account.
  * api-change:``transfer``: Add additional operations to throw ThrottlingExceptions
- from version 1.29.37
  * api-change:``connect``: Support for Routing Profile filter, SortCriteria, and grouping by Routing
    Profiles for GetCurrentMetricData API. Support for RoutingProfiles, UserHierarchyGroups, and Agents
    as filters, NextStatus and AgentStatusName for GetCurrentUserData. Adds ApproximateTotalCount to
    both APIs.
  * api-change:``connectparticipant``: Amazon Connect Chat introduces the Message Receipts feature.
    This feature allows agents and customers to receive message delivered and read receipts after they
    send a chat message.
  * api-change:``detective``: This release adds a missed AccessDeniedException type to several
    endpoints.
  * api-change:``fsx``: Fix a bug where a recent release might break certain existing SDKs.
  * api-change:``inspector2``: Amazon Inspector adds support for scanning NodeJS 18.x and Go 1.x AWS
    Lambda function runtimes.
- from version 1.29.36
  * api-change:``compute-optimizer``: This release enables AWS Compute Optimizer to analyze and
    generate optimization recommendations for ecs services running on Fargate.
  * api-change:``connect``: Amazon Connect Chat introduces the Idle Participant/Autodisconnect
    feature, which allows users to set timeouts relating to the activity of chat participants, using
    the new UpdateParticipantRoleConfig API.
  * api-change:``iotdeviceadvisor``: This release adds the following new features: 1) Documentation
    updates for IoT Device Advisor APIs. 2) Updated required request parameters for IoT Device Advisor
    APIs. 3) Added new service feature: ability to provide the test endpoint when customer executing
    the StartSuiteRun API.
  * api-change:``kinesis-video-webrtc-storage``: Amazon Kinesis Video Streams offers capabilities to
    stream video and audio in real-time via WebRTC to the cloud for storage, playback, and analytical
    processing. Customers can use our enhanced WebRTC SDK and cloud APIs to enable real-time streaming,
    as well as media ingestion to the cloud.
  * api-change:``rds``: Add support for managing master user password in AWS Secrets Manager for the
    DBInstance and DBCluster.
  * api-change:``secretsmanager``: Documentation updates for Secrets Manager
- from version 1.29.35
  * api-change:``connect``: Amazon Connect Chat now allows for JSON (application/json) message types
    to be sent as part of the initial message in the StartChatContact API.
  * api-change:``connectparticipant``: Amazon Connect Chat now allows for JSON (application/json)
    message types to be sent in the SendMessage API.
  * api-change:``license-manager-linux-subscriptions``: AWS License Manager now offers cross-region,
    cross-account tracking of commercial Linux subscriptions on AWS. This includes subscriptions
    purchased as part of EC2 subscription-included AMIs, on the AWS Marketplace, or brought to AWS via
    Red Hat Cloud Access Program.
  * api-change:``macie2``: This release adds support for analyzing Amazon S3 objects that use the S3
    Glacier Instant Retrieval (Glacier_IR) storage class.
  * api-change:``sagemaker``: This release enables adding RStudio Workbench support to an existing
    Amazon SageMaker Studio domain. It allows setting your RStudio on SageMaker environment
    configuration parameters and also updating the RStudioConnectUrl and RStudioPackageManagerUrl
    parameters for existing domains
  * api-change:``scheduler``: Updated the ListSchedules and ListScheduleGroups APIs to allow the
    NamePrefix field to start with a number. Updated the validation for executionRole field to support
    any role name.
  * api-change:``ssm``: Doc-only updates for December 2022.
  * api-change:``support``: Documentation updates for the AWS Support API
  * api-change:``transfer``: This release adds support for Decrypt as a workflow step type.
- from version 1.29.34
  * api-change:``batch``: Adds isCancelled and isTerminated to DescribeJobs response.
  * api-change:``ec2``: Adds support for pagination in the EC2 DescribeImages API.
  * api-change:``lookoutequipment``: This release adds support for listing inference schedulers by
    status.
  * api-change:``medialive``: This release adds support for two new features to AWS Elemental
    MediaLive. First, you can now burn-in timecodes to your MediaLive outputs. Second, we now now
    support the ability to decode Dolby E audio when it comes in on an input.
  * api-change:``nimble``: Amazon Nimble Studio now supports configuring session storage volumes and
    persistence, as well as backup and restore sessions through launch profiles.
  * api-change:``resource-explorer-2``: Documentation updates for AWS Resource Explorer.
  * api-change:``route53domains``: Use Route 53 domain APIs to change owner, create/delete DS record,
    modify IPS tag, resend authorization. New: AssociateDelegationSignerToDomain,
    DisassociateDelegationSignerFromDomain, PushDomain, ResendOperationAuthorization. Updated:
    UpdateDomainContact, ListOperations, CheckDomainTransferability.
  * api-change:``sagemaker``: Amazon SageMaker Autopilot adds support for new objective metrics in
    CreateAutoMLJob API.
  * api-change:``transcribe``: Enable our batch transcription jobs for Swedish and Vietnamese.
- from version 1.29.33
  * api-change:``athena``: Add missed InvalidRequestException in
    GetCalculationExecutionCode,StopCalculationExecution APIs. Correct required parameters (Payload and
    Type) in UpdateNotebook API. Change Notebook size from 15 Mb to 10 Mb.
  * api-change:``ecs``: This release adds support for alarm-based rollbacks in ECS, a new feature
    that allows customers to add automated safeguards for Amazon ECS service rolling updates.
  * api-change:``kinesis-video-webrtc-storage``: Amazon Kinesis Video Streams offers capabilities to
    stream video and audio in real-time via WebRTC to the cloud for storage, playback, and analytical
    processing. Customers can use our enhanced WebRTC SDK and cloud APIs to enable real-time streaming,
    as well as media ingestion to the cloud.
  * api-change:``kinesisvideo``: Amazon Kinesis Video Streams offers capabilities to stream video and
    audio in real-time via WebRTC to the cloud for storage, playback, and analytical processing.
    Customers can use our enhanced WebRTC SDK and cloud APIs to enable real-time streaming, as well as
    media ingestion to the cloud.
  * api-change:``rds``: Add support for --enable-customer-owned-ip to RDS
    create-db-instance-read-replica API for RDS on Outposts.
  * api-change:``sagemaker``: AWS Sagemaker - Sagemaker Images now supports Aliases as secondary
    identifiers for ImageVersions. SageMaker Images now supports additional metadata for ImageVersions
    for better images management.
- from version 1.29.32
  * api-change:``appflow``: This release updates the ListConnectorEntities API action so that it
    returns paginated responses that customers can retrieve with next tokens.
  * api-change:``cloudfront``: Updated documentation for CloudFront
  * api-change:``datasync``: AWS DataSync now supports the use of tags with task executions. With
    this new feature, you can apply tags each time you execute a task, giving you greater control and
    management over your task executions.
  * api-change:``efs``: Update efs client to latest version
  * api-change:``guardduty``: This release provides the valid characters for the Description and Name
    field.
  * api-change:``iotfleetwise``: Updated error handling for empty resource names in
    "UpdateSignalCatalog" and "GetModelManifest" operations.
  * api-change:``sagemaker``: AWS sagemaker - Features: This release adds support for random seed,
    it's an integer value used to initialize a pseudo-random number generator. Setting a random seed
    will allow the hyperparameter tuning search strategies to produce more consistent configurations
    for the same tuning job.
- from version 1.29.31
  * api-change:``backup-gateway``: This release adds support for VMware vSphere tags, enabling
    customer to protect VMware virtual machines using tag-based policies for AWS tags mapped from
    vSphere tags. This release also adds support for customer-accessible gateway-hypervisor interaction
    log and upload bandwidth rate limit schedule.
  * api-change:``connect``: Added support for "English - New Zealand" and "English - South African"
    to be used with Amazon Connect Custom Vocabulary APIs.
  * api-change:``ecs``: This release adds support for container port ranges in ECS, a new capability
    that allows customers to provide container port ranges to simplify use cases where multiple ports
    are in use in a container. This release updates TaskDefinition mutation APIs and the Task
    description APIs.
  * api-change:``eks``: Add support for Windows managed nodes groups.
  * api-change:``glue``: This release adds support for AWS Glue Crawler with native DeltaLake tables,
    allowing Crawlers to classify Delta Lake format tables and catalog them for query engines to query
    against.
  * api-change:``kinesis``: Added StreamARN parameter for Kinesis Data Streams APIs. Added a new
    opaque pagination token for ListStreams. SDKs will auto-generate Account Endpoint when accessing
    Kinesis Data Streams.
  * api-change:``location``: This release adds support for a new style, "VectorOpenDataStandardLight"
    which can be used with the new data source, "Open Data Maps (Preview)".
  * api-change:``m2``: Adds an optional create-only `KmsKeyId` property to Environment and
    Application resources.
  * api-change:``sagemaker``: SageMaker Inference Recommender now allows customers to load tests
    their models on various instance types using private VPC.
  * api-change:``securityhub``: Added new resource details objects to ASFF, including resources for
    AwsEc2LaunchTemplate, AwsSageMakerNotebookInstance, AwsWafv2WebAcl and AwsWafv2RuleGroup.
  * api-change:``translate``: Raised the input byte size limit of the Text field in the TranslateText
    API to 10000 bytes.
- from version 1.29.30
  * api-change:``ce``: This release supports percentage-based thresholds on Cost Anomaly Detection
    alert subscriptions.
  * api-change:``cloudwatch``: Update cloudwatch client to latest version
  * api-change:``networkmanager``: Appliance Mode support for AWS Cloud WAN.
  * api-change:``redshift-data``: This release adds a new --client-token field to ExecuteStatement
    and BatchExecuteStatement operations. Customers can now run queries with the additional client
    token parameter to ensures idempotency.
  * api-change:``sagemaker-metrics``: Update SageMaker Metrics documentation.
- from version 1.29.29
  * api-change:``cloudtrail``: Merging mainline branch for service model into mainline release
    branch. There are no new APIs.
  * api-change:``rds``: This deployment adds ClientPasswordAuthType field to the Auth structure of
    the DBProxy.
- from version 1.29.28
  * bugfix:Endpoint provider: Updates ARN parsing ``resourceId`` delimiters
  * api-change:``customer-profiles``: This release allows custom strings in PartyType and Gender
    through 2 new attributes in the CreateProfile and UpdateProfile APIs: PartyTypeString and
    GenderString.
  * api-change:``ec2``: This release updates DescribeFpgaImages to show supported instance types of
    AFIs in its response.
  * api-change:``kinesisvideo``: This release adds support for public preview of Kinesis Video Stream
    at Edge enabling customers to provide configuration for the Kinesis Video Stream EdgeAgent running
    on an on-premise IoT device. Customers can now locally record from cameras and stream videos to the
    cloud on configured schedule.
  * api-change:``lookoutvision``: This documentation update adds kms:GenerateDataKey as a required
    permission to StartModelPackagingJob.
  * api-change:``migration-hub-refactor-spaces``: This release adds support for Lambda alias service
    endpoints. Lambda alias ARNs can now be passed into CreateService.
  * api-change:``rds``: Update the RDS API model to support copying option groups during the
    CopyDBSnapshot operation
  * api-change:``rekognition``: Adds support for "aliases" and "categories", inclusion and exclusion
    filters for labels and label categories, and aggregating labels by video segment timestamps for
    Stored Video Label Detection APIs.
  * api-change:``sagemaker-metrics``: This release introduces support SageMaker Metrics APIs.
  * api-change:``wafv2``: Documents the naming requirement for logging destinations that you use with
    web ACLs.
- from version 1.29.27
  * api-change:``iotfleetwise``: Deprecated assignedValue property for actuators and attributes.
    Added a message to invalid nodes and invalid decoder manifest exceptions.
  * api-change:``logs``: Doc-only update for CloudWatch Logs, for Tagging Permissions clarifications
  * api-change:``medialive``: Link devices now support buffer size (latency) configuration. A higher
    latency value means a longer delay in transmitting from the device to MediaLive, but improved
    resiliency. A lower latency value means a shorter delay, but less resiliency.
  * api-change:``mediapackage-vod``: This release provides the approximate number of assets in a
    packaging group.</changelog>
  <changelog author="dmueller@suse.com" date="1673265600">- correct requires
- update to 1.29.45:
  * api-change:``acm-pca``: Added revocation parameter validation: bucket names
    must match S3 bucket naming rules and CNAMEs conform to RFC2396 restrictions
    on the use of special characters in URIs.
  * api-change:``auditmanager``: This release introduces a new data retention
    option in your Audit Manager settings. You can now use the
    DeregistrationPolicy parameter to specify if you want to delete your data
    when you deregister Audit Manager.
  * api-change:``amplifybackend``: Updated GetBackendAPIModels response to
    include ModelIntrospectionSchema json string
  * api-change:``apprunner``: This release adds support of securely referencing
    secrets and configuration data that are stored in Secrets Manager and SSM
    Parameter Store by adding them as environment secrets in your App Runner
    service.
  * api-change:``connect``: Documentation update for a new Initiation Method
    value in DescribeContact API
  * api-change:``emr-serverless``: Adds support for customized images. You can
    now provide runtime images when creating or updating EMR Serverless
    Applications.
  * api-change:``lightsail``: Documentation updates for Amazon Lightsail.
  * api-change:``mwaa``: MWAA supports Apache Airflow version 2.4.3.
  * api-change:``rds``: This release adds support for specifying which
    certificate authority (CA) to use for a DB instance's server certificate
    during DB instance creation, as well as other CA enhancements.
  * api-change:``application-autoscaling``: Customers can now use the existing
    DescribeScalingActivities API to also see the detailed and machine-readable
    reasons for Application Auto Scaling not scaling their resources and, if
    needed, take the necessary corrective actions.
  * api-change:``logs``: Update to remove sequenceToken as a required field in
    PutLogEvents calls.
  * api-change:``ssm``: Adding support for QuickSetup Document Type in Systems
    Manager
  * api-change:``securitylake``: Allow CreateSubscriber API to take string input
    that allows setting more descriptive SubscriberDescription field. Make
    souceTypes field required in model level for UpdateSubscriberRequest as it is
    required for every API call on the backend. Allow ListSubscribers take any
    String as nextToken param.</changelog>
  <changelog author="dmueller@suse.com" date="1673870400">- update to 1.29.50:
  * api-change:``connect``: This release updates the responses of
    UpdateContactFlowContent, UpdateContactFlowMetadata, UpdateContactFlowName
    and DeleteContactFlow API with empty responses.
  * api-change:``ec2``: Documentation updates for EC2.
  * api-change:``outposts``: This release adds POWER_30_KVA as an option for
    PowerDrawKva. PowerDrawKva is part of the RackPhysicalProperties structure
    in the CreateSite request.
  * api-change:``resource-groups``: AWS Resource Groups customers can now turn
    on Group Lifecycle Events in their AWS account. When you turn this on,
    Resource Groups monitors your groups for changes to group state or
    membership. Those changes are sent to Amazon EventBridge as events that you
    can respond to using rules you create.
  * api-change:``cleanrooms``: Initial release of AWS Clean Rooms
  * api-change:``lambda``: Add support for MaximumConcurrency parameter for SQS
    event source. Customers can now limit the maximum concurrent invocations
    for their SQS Event Source Mapping.
  * api-change:``logs``: Bug fix: logGroupName is now not a required field in
    GetLogEvents, FilterLogEvents, GetLogGroupFields, and DescribeLogStreams
    APIs as logGroupIdentifier can be provided instead
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added
    support for compact DASH manifest generation, audio normalization using
    TruePeak measurements, and the ability to clip the sample range in the
    color corrector.
  * api-change:``secretsmanager``: Update documentation for new ListSecrets and DescribeSecret parameters
  * api-change:``kendra``: This release adds support to new document types -
    RTF, XML, XSLT, MS_EXCEL, CSV, JSON, MD
  * api-change:``location``: This release adds support for two new route travel
    models, Bicycle and Motorcycle which can be used with Grab data source.
  * api-change:``rds``: This release adds support for configuring allocated
    storage on the CreateDBInstanceReadReplica,
    RestoreDBInstanceFromDBSnapshot, and RestoreDBInstanceToPointInTime APIs.
  * api-change:``ecr-public``: This release for Amazon ECR Public makes several
    change to bring the SDK into sync with the API.
  * api-change:``kendra-ranking``: Introducing Amazon Kendra Intelligent
    Ranking, a new set of Kendra APIs that leverages Kendra semantic ranking
    capabilities to improve the quality of search results from other search
    services (i.e. OpenSearch, ElasticSearch, Solr).
  * api-change:``network-firewall``: Network Firewall now supports the Suricata
    rule action reject, in addition to the actions pass, drop, and alert.
  * api-change:``ram``: Enabled FIPS aws-us-gov endpoints in SDK.
  * api-change:``workspaces-web``: This release adds support for a new portal
    authentication type: AWS IAM Identity Center (successor to AWS Single
    Sign-On).</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674129600">- Update to 1.29.52
  * api-change:``cloudwatch``: Update cloudwatch client to latest version
  * api-change:``efs``: Update efs client to latest version
  * api-change:``ivschat``: Updates the range for a Chat Room's maximumMessageRatePerSecond field.
  * api-change:``wafv2``: Improved the visibility of the guidance for updating AWS WAF resources,
    such as web ACLs and rule groups.
- from version 1.29.51
  * api-change:``billingconductor``: This release adds support for SKU Scope for pricing plans.
  * api-change:``cloud9``: Added minimum value to AutomaticStopTimeMinutes parameter.
  * api-change:``imagebuilder``: Add support for AWS Marketplace product IDs as input during
    CreateImageRecipe for the parent-image parameter. Add support for listing third-party components.
  * api-change:``network-firewall``: Network Firewall now allows creation of dual stack endpoints,
    enabling inspection of IPv6 traffic.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674820800">- Update to 1.29.58
  * api-change:``events``: Update events client to latest version
  * api-change:``iotfleetwise``: Add model validation to BatchCreateVehicle and BatchUpdateVehicle
    operations that invalidate requests with an empty vehicles list.
  * api-change:``s3``: Allow FIPS to be used with path-style URLs.
- from version 1.29.57
  * api-change:``cloudformation``: Enabled FIPS aws-us-gov endpoints in SDK.
  * api-change:``ec2``: This release adds new functionality that allows customers to provision IPv6
    CIDR blocks through Amazon VPC IP Address Manager (IPAM) as well as allowing customers to utilize
    IPAM Resource Discovery APIs.
  * api-change:``m2``: Add returnCode, batchJobIdentifier in GetBatchJobExecution response, for user
    to view the batch job execution result &amp; unique identifier from engine. Also removed unused headers
    from REST APIs
  * api-change:``polly``: Add 5 new neural voices - Sergio (es-ES), Andres (es-MX), Remi (fr-FR),
    Adriano (it-IT) and Thiago (pt-BR).
  * api-change:``redshift-serverless``: Added query monitoring rules as possible parameters for
    create and update workgroup operations.
  * api-change:``s3control``: Add additional endpoint tests for S3 Control. Fix missing endpoint
    parameters for PutBucketVersioning and GetBucketVersioning. Prior to this fix, those operations may
    have resulted in an invalid endpoint being resolved.
  * api-change:``sagemaker``: SageMaker Inference Recommender now decouples from Model Registry and
    could accept Model Name to invoke inference recommendations job; Inference Recommender now provides
    CPU/Memory Utilization metrics data in recommendation output.
  * api-change:``sts``: Doc only change to update wording in a key topic
- from version 1.29.56
  * api-change:``databrew``: Enabled FIPS us-gov-west-1 endpoints in SDK.
  * api-change:``route53``: Amazon Route 53 now supports the Asia Pacific (Melbourne) Region
    (ap-southeast-4) for latency records, geoproximity records, and private DNS for Amazon VPCs in that
    region.
  * api-change:``ssm-sap``: This release provides updates to documentation and support for listing
    operations performed by AWS Systems Manager for SAP.
- from version 1.29.55
  * api-change:``lambda``: Release Lambda RuntimeManagementConfig, enabling customers to better
    manage runtime updates to their Lambda functions. This release adds two new APIs,
    GetRuntimeManagementConfig and PutRuntimeManagementConfig, as well as support on existing
    Create/Get/Update function APIs.
  * api-change:``sagemaker``: Amazon SageMaker Inference now supports P4de instance types.
- from version 1.29.54
  * api-change:``ec2``: C6in, M6in, M6idn, R6in and R6idn instances are powered by 3rd Generation
    Intel Xeon Scalable processors (code named Ice Lake) with an all-core turbo frequency of 3.5 GHz.
  * api-change:``ivs``: API and Doc update. Update to arns field in BatchGetStreamKey. Also updates
    to operations and structures.
  * api-change:``quicksight``: This release adds support for data bars in QuickSight table and
    increases pivot table field well limit.
- from version 1.29.53
  * api-change:``appflow``: Adding support for Salesforce Pardot connector in Amazon AppFlow.
  * api-change:``codeartifact``: Documentation updates for CodeArtifact
  * api-change:``connect``: Amazon Connect Chat introduces Persistent Chat, allowing customers to
    resume previous conversations with context and transcripts carried over from previous chats,
    eliminating the need to repeat themselves and allowing agents to provide personalized service with
    access to entire conversation history.
  * api-change:``connectparticipant``: This release updates Amazon Connect Participant's
    GetTranscript api to provide transcripts of past chats on a persistent chat session.
  * api-change:``ec2``: Adds SSM Parameter Resource Aliasing support to EC2 Launch Templates. Launch
    Templates can now store parameter aliases in place of AMI Resource IDs. CreateLaunchTemplateVersion
    and DescribeLaunchTemplateVersions now support a convenience flag, ResolveAlias, to return the
    resolved parameter value.
  * api-change:``glue``: Release Glue Studio Hudi Data Lake Format for SDK/CLI
  * api-change:``groundstation``: Add configurable prepass and postpass times for
    DataflowEndpointGroup. Add Waiter to allow customers to wait for a contact that was reserved
    through ReserveContact
  * api-change:``logs``: Bug fix - Removed the regex pattern validation from CoralModel to avoid
    potential security issue.
  * api-change:``medialive``: AWS Elemental MediaLive adds support for SCTE 35 preRollMilliSeconds.
  * api-change:``opensearch``: This release adds the enhanced dry run option, that checks for
    validation errors that might occur when deploying configuration changes and provides a summary of
    these errors, if any. The feature will also indicate whether a blue/green deployment will be
    required to apply a change.
  * api-change:``panorama``: Added AllowMajorVersionUpdate option to OTAJobConfig to make appliance
    software major version updates opt-in.
  * api-change:``sagemaker``: HyperParameterTuningJobs now allow passing environment variables into
    the corresponding TrainingJobs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675166400">- Update to 1.29.60
  * api-change:``clouddirectory``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``cloudformation``: This feature provides a method of obtaining which regions a
    stackset has stack instances deployed in.
  * api-change:``discovery``: Update ImportName validation to 255 from the current length of 100
  * api-change:``dlm``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``ec2``: We add Prefix Lists as a new route destination option for LocalGatewayRoutes.
    This will allow customers to create routes to Prefix Lists. Prefix List routes will allow customers
    to group individual CIDR routes with the same target into a single route.
  * api-change:``imagebuilder``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``kafka``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``mediaconvert``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``swf``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
- from version 1.29.59
  * api-change:``application-autoscaling``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``appstream``: Fixing the issue where Appstream waiters hang for fleet_started and
    fleet_stopped.
  * api-change:``elasticbeanstalk``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``fis``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``glacier``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``greengrass``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``greengrassv2``: Enabled FIPS endpoints for GovCloud (US) in SDK.
  * api-change:``mediatailor``: This release introduces the As Run logging type, along with API and
    documentation updates.
  * api-change:``outposts``: Adding support for payment term in GetOrder, CreateOrder responses.
  * api-change:``sagemaker-runtime``: Update sagemaker-runtime client to latest version
  * api-change:``sagemaker``: This release supports running SageMaker Training jobs with container
    images that are in a private Docker registry.
  * api-change:``serverlessrepo``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675857600">- Update to 1.29.66
  * api-change:``transfer``: Updated the documentation for the ImportCertificate API call, and added
    examples.
- from version 1.29.65
  * api-change:``compute-optimizer``: AWS Compute optimizer can now infer if Kafka is running on an
    instance.
  * api-change:``customer-profiles``: This release deprecates the PartyType and Gender enum data
    types from the Profile model and replaces them with new PartyTypeString and GenderString
    attributes, which accept any string of length up to 255.
  * api-change:``frauddetector``: My AWS Service (Amazon Fraud Detector) - This release introduces
    Cold Start Model Training which optimizes training for small datasets and adds intelligent methods
    for treating unlabeled data. You can now train Online Fraud Insights or Transaction Fraud Insights
    models with minimal historical-data.
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added improved scene change
    detection capabilities and a bandwidth reduction filter, along with video quality enhancements, to
    the AVC encoder.
  * api-change:``outposts``: Adds OrderType to Order structure. Adds PreviousOrderId and
    PreviousLineItemId to LineItem structure. Adds new line item status REPLACED. Increases maximum
    length of pagination token.
- from version 1.29.64
  * enhancement:AWSCRT: Upgrade awscrt version to 0.16.9
  * api-change:``proton``: Add new GetResourcesSummary API
  * api-change:``redshift``: Corrects descriptions of the parameters for the API operations
    RestoreFromClusterSnapshot, RestoreTableFromClusterSnapshot, and CreateCluster.
- from version 1.29.63
  * api-change:``appconfig``: AWS AppConfig introduces KMS customer-managed key (CMK) encryption of
    configuration data, along with AWS Secrets Manager as a new configuration data source. S3 objects
    using SSE-KMS encryption and SSM Parameter Store SecureStrings are also now supported.
  * api-change:``connect``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``ec2``: Documentation updates for EC2.
  * api-change:``elbv2``: Update elbv2 client to latest version
  * api-change:``keyspaces``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``quicksight``: QuickSight support for Radar Chart and Dashboard Publish Options
  * api-change:``redshift``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``sso-admin``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
- from version 1.29.62
  * bugfix:``s3``: boto3 no longer overwrites user supplied `Content-Encoding` with `aws-chunked`
    when user also supplies `ChecksumAlgorithm`.
  * api-change:``devops-guru``: This release adds filter support ListAnomalyForInsight API.
  * api-change:``forecast``: This release will enable customer select INCREMENTAL as ImportModel in
    Forecast's CreateDatasetImportJob API. Verified latest SDK containing required attribute, following
    https://w.amazon.com/bin/view/AWS-Seer/Launch/Trebuchet/
  * api-change:``iam``: Documentation updates for AWS Identity and Access Management (IAM).
  * api-change:``mediatailor``: The AWS Elemental MediaTailor SDK for Channel Assembly has added
    support for program updates, and the ability to clip the end of VOD sources in programs.
  * api-change:``sns``: Additional attributes added for set-topic-attributes.
- from version 1.29.61
  * api-change:``accessanalyzer``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``appsync``: This release introduces the feature to support EventBridge as AppSync
    data source.
  * api-change:``cloudtrail-data``: Add CloudTrail Data Service to enable users to ingest activity
    events from non-AWS sources into CloudTrail Lake.
  * api-change:``cloudtrail``: Add new "Channel" APIs to enable users to manage channels used for
    CloudTrail Lake integrations, and "Resource Policy" APIs to enable users to manage the
    resource-based permissions policy attached to a channel.
  * api-change:``codeartifact``: This release introduces a new DeletePackage API, which enables
    deletion of a package and all of its versions from a repository.
  * api-change:``connectparticipant``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``ec2``: This launch allows customers to associate up to 8 IP addresses to their NAT
    Gateways to increase the limit on concurrent connections to a single destination by eight times
    from 55K to 440K.
  * api-change:``groundstation``: DigIF Expansion changes to the Customer APIs.
  * api-change:``iot``: Added support for IoT Rules Engine Cloudwatch Logs action batch mode.
  * api-change:``kinesis``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``opensearch``: Amazon OpenSearch Service adds the option for a VPC endpoint
    connection between two domains when the local domain uses OpenSearch version 1.3 or 2.3. You can
    now use remote reindex to copy indices from one VPC domain to another without a reverse proxy.
  * api-change:``outposts``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``polly``: Amazon Polly adds two new neural American English voices - Ruth, Stephen
  * api-change:``sagemaker``: Amazon SageMaker Automatic Model Tuning now supports more completion
    criteria for Hyperparameter Optimization.
  * api-change:``securityhub``: New fields have been added to the AWS Security Finding Format.
    Compliance.SecurityControlId is a unique identifier for a security control across standards.
    Compliance.AssociatedStandards contains all enabled standards in which a security control is
    enabled.
  * api-change:``support``: This fixes incorrect endpoint construction when a customer is explicitly
    setting a region.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1676462400">- Update to 1.29.71
  * api-change:``appconfig``: AWS AppConfig now offers the option to set a version label on hosted
    configuration versions. Version labels allow you to identify specific hosted configuration versions
    based on an alternate versioning scheme that you define.
  * api-change:``datasync``: With this launch, we are giving customers the ability to use older SMB
    protocol versions, enabling them to use DataSync to copy data to and from their legacy storage
    arrays.
  * api-change:``ec2``: With this release customers can turn host maintenance on or off when
    allocating or modifying a supported dedicated host. Host maintenance is turned on by default for
    supported hosts.
- from version 1.29.70
  * api-change:``account``: This release of the Account Management API enables customers to view and
    manage whether AWS Opt-In Regions are enabled or disabled for their Account. For more information,
    see https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html
  * api-change:``appconfigdata``: AWS AppConfig now offers the option to set a version label on
    hosted configuration versions. If a labeled hosted configuration version is deployed, its version
    label is available in the GetLatestConfiguration response.
  * api-change:``snowball``: Adds support for EKS Anywhere on Snowball. AWS Snow Family customers can
    now install EKS Anywhere service on Snowball Edge Compute Optimized devices.
- from version 1.29.69
  * api-change:``autoscaling``: You can now either terminate/replace, ignore, or wait for EC2 Auto
    Scaling instances on standby or protected from scale in. Also, you can also roll back changes from
    a failed instance refresh.
  * api-change:``connect``: This update provides the Wisdom session ARN for contacts enabled for
    Wisdom in the chat channel.
  * api-change:``ec2``: Adds support for waiters that automatically poll for an imported snapshot
    until it reaches the completed state.
  * api-change:``polly``: Amazon Polly adds two new neural Japanese voices - Kazuha, Tomoko
  * api-change:``sagemaker``: Amazon SageMaker Autopilot adds support for selecting algorithms in
    CreateAutoMLJob API.
  * api-change:``sns``: This release adds support for SNS X-Ray active tracing as well as other
    updates.
- from version 1.29.68
  * api-change:``chime-sdk-meetings``: Documentation updates for Chime Meetings SDK
  * api-change:``emr-containers``: EMR on EKS allows configuring retry policies for job runs through
    the StartJobRun API. Using retry policies, a job cause a driver pod to be restarted automatically
    if it fails or is deleted. The job's status can be seen in the DescribeJobRun and ListJobRun APIs
    and monitored using CloudWatch events.
  * api-change:``evidently``: Updated entity overrides parameter to accept up to 2500 overrides or a
    total of 40KB.
  * api-change:``lexv2-models``: Update lexv2-models client to latest version
  * api-change:``lexv2-runtime``: Update lexv2-runtime client to latest version
  * api-change:``lightsail``: Documentation updates for Lightsail
  * api-change:``migration-hub-refactor-spaces``: This release adds support for creating environments
    with a network fabric type of NONE
  * api-change:``workdocs``: Doc only update for the WorkDocs APIs.
  * api-change:``workspaces``: Removed Windows Server 2016 BYOL and made changes based on IAM
    campaign.
- from version 1.29.67
  * api-change:``backup``: This release added one attribute (resource name) in the output model of
    our 9 existing APIs in AWS backup so that customers will see the resource name at the output. No
    input required from Customers.
  * api-change:``cloudfront``: CloudFront Origin Access Control extends support to AWS Elemental
    MediaStore origins.
  * api-change:``glue``: DirectJDBCSource + Glue 4.0 streaming options
  * api-change:``lakeformation``: This release removes the LFTagpolicyResource expression limits.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677240000">- Update to 1.29.78
  * api-change:``appflow``: This release enables the customers to choose whether to use Private Link
    for Metadata and Authorization call when using a private Salesforce connections
  * api-change:``ecs``: This release supports deleting Amazon ECS task definitions that are in the
    INACTIVE state.
  * api-change:``grafana``: Doc-only update. Updated information on attached role policies for
    customer provided roles
  * api-change:``guardduty``: Updated API and data types descriptions for CreateFilter, UpdateFilter,
    and TriggerDetails.
  * api-change:``iotwireless``: In this release, we add additional capabilities for the FUOTA which
    allows user to configure the fragment size, the sending interval and the redundancy ratio of the
    FUOTA tasks
  * api-change:``location``: This release adds support for using Maps APIs with an API Key in
    addition to AWS Cognito. This includes support for adding, listing, updating and deleting API Keys.
  * api-change:``macie2``: This release adds support for a new finding type,
    Policy:IAMUser/S3BucketSharedWithCloudFront, and S3 bucket metadata that indicates if a bucket is
    shared with an Amazon CloudFront OAI or OAC.
  * api-change:``wafv2``: You can now associate an AWS WAF v2 web ACL with an AWS App Runner service.
- from version 1.29.77
  * api-change:``chime-sdk-voice``: This release introduces support for Voice Connector media metrics
    in the Amazon Chime SDK Voice namespace
  * api-change:``cloudfront``: CloudFront now supports block lists in origin request policies so that
    you can forward all headers, cookies, or query string from viewer requests to the origin *except*
    for those specified in the block list.
  * api-change:``datasync``: AWS DataSync has relaxed the minimum length constraint of AccessKey for
    Object Storage locations to 1.
  * api-change:``opensearch``: This release lets customers configure Off-peak window and software
    update related properties for a new/existing domain. It enhances the capabilities of
    StartServiceSoftwareUpdate API; adds 2 new APIs - ListScheduledActions &amp; UpdateScheduledAction; and
    allows Auto-tune to make use of Off-peak window.
  * api-change:``rum``: CloudWatch RUM now supports CloudWatch Custom Metrics
  * api-change:``ssm``: Document only update for Feb 2023
- from version 1.29.76
  * api-change:``quicksight``: S3 data sources now accept a custom IAM role.
  * api-change:``resiliencehub``: In this release we improved resilience hub application creation and
    maintenance by introducing new resource and app component crud APIs, improving visibility and
    maintenance of application input sources and added support for additional information attributes to
    be provided by customers.
  * api-change:``securityhub``: Documentation updates for AWS Security Hub
  * api-change:``tnb``: This is the initial SDK release for AWS Telco Network Builder (TNB). AWS
    Telco Network Builder is a network automation service that helps you deploy and manage telecom
    networks.
- from version 1.29.75
  * bugfix:SSO: Fixes aws/aws-cli`#7496 &lt;https://github.com/aws/aws-cli/issues/7496&gt;`__ by using the
    correct profile name rather than the one set in the session.
  * api-change:``auditmanager``: This release introduces a ServiceQuotaExceededException to the
    UpdateAssessmentFrameworkShare API operation.
  * api-change:``connect``: Reasons for failed diff has been approved by SDK Reviewer
- from version 1.29.74
  * api-change:``apprunner``: This release supports removing MaxSize limit for
    AutoScalingConfiguration.
  * api-change:``glue``: Release of Delta Lake Data Lake Format for Glue Studio Service
- from version 1.29.73
  * api-change:``emr``: Update emr client to latest version
  * api-change:``grafana``: With this release Amazon Managed Grafana now supports inbound Network
    Access Control that helps you to restrict user access to your Grafana workspaces
  * api-change:``ivs``: Doc-only update. Updated text description in DeleteChannel, Stream, and
    StreamSummary.
  * api-change:``wafv2``: Added a notice for account takeover prevention (ATP). The interface
    incorrectly lets you to configure ATP response inspection in regional web ACLs in Region US East
    (N. Virginia), without returning an error. ATP response inspection is only available in web ACLs
    that protect CloudFront distributions.
- from version 1.29.72
  * api-change:``cloudtrail``: This release adds an InsufficientEncryptionPolicyException type to the
    StartImport endpoint
  * api-change:``efs``: Update efs client to latest version
  * api-change:``frauddetector``: This release introduces Lists feature which allows customers to
    reference a set of values in Fraud Detector's rules. With Lists, customers can dynamically manage
    these attributes in real time. Lists can be created/deleted and its contents can be modified using
    the Fraud Detector API.
  * api-change:``glue``: Fix DirectJDBCSource not showing up in CLI code gen
  * api-change:``privatenetworks``: This release introduces a new StartNetworkResourceUpdate API,
    which enables return/replacement of hardware from a NetworkSite.
  * api-change:``rds``: Database Activity Stream support for RDS for SQL Server.
  * api-change:``wafv2``: For protected CloudFront distributions, you can now use the AWS WAF Fraud
    Control account takeover prevention (ATP) managed rule group to block new login attempts from
    clients that have recently submitted too many failed login attempts.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1678708800">- Update to 1.29.89
  * api-change:``ivschat``: This release adds a new exception returned when calling AWS IVS chat
    UpdateLoggingConfiguration. Now UpdateLoggingConfiguration can return ConflictException when
    invalid updates are made in sequence to Logging Configurations.
  * api-change:``secretsmanager``: The type definitions of SecretString and SecretBinary now have a
    minimum length of 1 in the model to match the exception thrown when you pass in empty values.
- from version 1.29.88
  * api-change:``codeartifact``: This release introduces the generic package format, a mechanism for
    storing arbitrary binary assets. It also adds a new API, PublishPackageVersion, to allow for
    publishing generic packages.
  * api-change:``connect``: This release adds a new API, GetMetricDataV2, which returns metric data
    for Amazon Connect.
  * api-change:``evidently``: Updated entity override documentation
  * api-change:``networkmanager``: This update provides example usage for TransitGatewayRouteTableArn.
  * api-change:``quicksight``: This release has two changes: add state persistence feature for
    embedded dashboard and console in GenerateEmbedUrlForRegisteredUser API; add properties for hidden
    collapsed row dimensions in PivotTableOptions.
  * api-change:``redshift-data``: Added support for Redshift Serverless workgroup-arn wherever the
    WorkgroupName parameter is available.
  * api-change:``sagemaker``: Amazon SageMaker Inference now allows SSM access to customer's model
    container by setting the "EnableSSMAccess" parameter for a ProductionVariant in
    CreateEndpointConfig API.
  * api-change:``servicediscovery``: Updated all AWS Cloud Map APIs to provide consistent throttling
    exception (RequestLimitExceeded)
  * api-change:``sesv2``: This release introduces a new recommendation in Virtual Deliverability
    Manager Advisor, which detects missing or misconfigured Brand Indicator for Message Identification
    (BIMI) DNS records for customer sending identities.
- from version 1.29.87
  * api-change:``athena``: A new field SubstatementType is added to GetQueryExecution API, so
    customers have an error free way to detect the query type and interpret the result.
  * api-change:``dynamodb``: Adds deletion protection support to DynamoDB tables. Tables with
    deletion protection enabled cannot be deleted. Deletion protection is disabled by default, can be
    enabled via the CreateTable or UpdateTable APIs, and is visible in TableDescription. This setting
    is not replicated for Global Tables.
  * api-change:``ec2``: Introducing Amazon EC2 C7g, M7g and R7g instances, powered by the latest
    generation AWS Graviton3 processors and deliver up to 25% better performance over Graviton2-based
    instances.
  * api-change:``lakeformation``: This release adds two new API support "GetDataCellsFiler" and
    "UpdateDataCellsFilter", and also updates the corresponding documentation.
  * api-change:``mediapackage-vod``: This release provides the date and time VOD resources were
    created.
  * api-change:``mediapackage``: This release provides the date and time live resources were created.
  * api-change:``route53resolver``: Add dual-stack and IPv6 support for Route 53 Resolver
    Endpoint,Add IPv6 target IP in Route 53 Resolver Forwarding Rule
  * api-change:``sagemaker``: There needs to be a user identity to specify the SageMaker user who
    perform each action regarding the entity. However, these is a not a unified concept of user
    identity across SageMaker service that could be used today.
- from version 1.29.86
  * api-change:``dms``: This release adds DMS Fleet Advisor Target Recommendation APIs and exposes
    functionality for DMS Fleet Advisor. It adds functionality to start Target Recommendation
    calculation.
  * api-change:``location``: Documentation update for the release of 3 additional map styles for use
    with Open Data Maps: Open Data Standard Dark, Open Data Visualization Light &amp; Open Data
    Visualization Dark.
- from version 1.29.85
  * api-change:``account``: AWS Account alternate contact email addresses can now have a length of
    254 characters and contain the character "|".
  * api-change:``ivs``: Updated text description in DeleteChannel, Stream, and StreamSummary.
- from version 1.29.84
  * api-change:``dynamodb``: Documentation updates for DynamoDB.
  * api-change:``ec2``: This release adds support for a new boot mode for EC2 instances called 'UEFI
    Preferred'.
  * api-change:``macie2``: Documentation updates for Amazon Macie
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has improved handling for
    different input and output color space combinations.
  * api-change:``medialive``: AWS Elemental MediaLive adds support for Nielsen watermark timezones.
  * api-change:``transcribe``: Amazon Transcribe now supports role access for these API operations:
    CreateVocabulary, UpdateVocabulary, CreateVocabularyFilter, and UpdateVocabularyFilter.
- from version 1.29.83
  * api-change:``iot``: A recurring maintenance window is an optional configuration used for rolling
    out the job document to all devices in the target group observing a predetermined start time,
    duration, and frequency that the maintenance window occurs.
  * api-change:``migrationhubstrategy``: This release updates the File Import API to allow importing
    servers already discovered by customers with reduced pre-requisites.
  * api-change:``organizations``: This release introduces a new reason code,
    ACCOUNT_CREATION_NOT_COMPLETE, to ConstraintViolationException in CreateOrganization API.
  * api-change:``pi``: This release adds a new field PeriodAlignment to allow the customer specifying
    the returned timestamp of time periods to be either the start or end time.
  * api-change:``pipes``: This release fixes some input parameter range and patterns.
  * api-change:``sagemaker``: Add a new field "EndpointMetrics" in SageMaker Inference Recommender
    "ListInferenceRecommendationsJobSteps" API response.
- from version 1.29.82
  * api-change:``codecatalyst``: Published Dev Environments StopDevEnvironmentSession API
  * api-change:``pricing``: This release adds 2 new APIs - ListPriceLists which returns a list of
    applicable price lists, and GetPriceListFileUrl which outputs a URL to retrieve your price lists
    from the generated file from ListPriceLists
  * api-change:``s3outposts``: S3 on Outposts introduces a new API ListOutpostsWithS3, with this API
    you can list all your Outposts with S3 capacity.
- from version 1.29.81
  * enhancement:Documentation: Splits service documentation into multiple sub-pages for better
    organization and faster loading time.
  * api-change:``comprehend``: Amazon Comprehend now supports flywheels to help you train and manage
    new model versions for custom models.
  * api-change:``ec2``: This release allows IMDS support to be set to v2-only on an existing AMI, so
    that all future instances launched from that AMI will use IMDSv2 by default.
  * api-change:``kms``: AWS KMS is deprecating the RSAES_PKCS1_V1_5 wrapping algorithm option in the
    GetParametersForImport API that is used in the AWS KMS Import Key Material feature. AWS KMS will
    end support for this wrapping algorithm by October 1, 2023.
  * api-change:``lightsail``: This release adds Lightsail for Research feature support, such as GUI
    session access, cost estimates, stop instance on idle, and disk auto mount.
  * api-change:``managedblockchain``: This release adds support for tagging to the accessor resource
    in Amazon Managed Blockchain
  * api-change:``omics``: Minor model changes to accomodate batch imports feature
- from version 1.29.80
  * api-change:``devops-guru``: This release adds the description field on ListAnomaliesForInsight
    and DescribeAnomaly API responses for proactive anomalies.
  * api-change:``drs``: New fields were added to reflect availability zone data in source server and
    recovery instance description commands responses, as well as source server launch status.
  * api-change:``internetmonitor``: CloudWatch Internet Monitor is a a new service within CloudWatch
    that will help application developers and network engineers continuously monitor internet
    performance metrics such as availability and performance between their AWS-hosted applications and
    end-users of these applications
  * api-change:``lambda``: This release adds the ability to create ESMs with Document DB change
    streams as event source. For more information see
    https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.html.
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added support for HDR10 to
    SDR tone mapping, and animated GIF video input sources.
  * api-change:``timestream-write``: This release adds the ability to ingest batched historical data
    or migrate data in bulk from S3 into Timestream using CSV files.
- from version 1.29.79
  * api-change:``connect``: StartTaskContact API now supports linked task creation with a new
    optional RelatedContactId parameter
  * api-change:``connectcases``: This release adds the ability to delete domains through the
    DeleteDomain API. For more information see
    https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
  * api-change:``redshift``: Documentation updates for Redshift API bringing it in line with IAM best
    practices.
  * api-change:``securityhub``: New Security Hub APIs and updates to existing APIs that help you
    consolidate control findings and enable and disable controls across all supported standards
  * api-change:``servicecatalog``: Documentation updates for Service Catalog</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680696000">- Update in SLE-15 (bsc#1209255, jsc#PED-3780)
- Add python-python-dateutil and python-jmespath to BuildRequires
- Remove version constraint on python-pytest in BuildRequires
- Revert changes to Requires that introduced new incompatible syntax</changelog>
</package>
<package pkgid="86d79e1579af138962c5d087dcfb9a5c38e19e6e58127f212db8b8b01b32edaf" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="2c87a813380b52893f8dd3ad497ebe1ba81d493cef322f00c2f74920640615c3" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="c9666f8131a04887aac5e26f51197ac5e98fdd91813aac6c870eb6e9e516cc9b" name="python3-firewall" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150400.8.9.1"/>
  <changelog author="Mathias.Homann@opensuse.org" date="1570708800">- rebased the original patch from revision 19</changelog>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir with %_prefix/lib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="hpj@urpla.net" date="1583668800">- Update to version 0.7.3:
  * release: v0.7.3
  * chore: update translations
  * doc: README: add note about integration tests
  * test: check-container: also run check-integration
  * test: integration: NM zone overrides interface on reload
  * test: build: support integration tests
  * test: functions: add macro NMCLI_CHECK
  * test: functions: new macros for starting/stopping NetworkManager
  * fix: test: leave "cleanup" for tests cases
  * test: check-container: add support for fedora rawhide
  * test: check-container: add support for debian sid
  * test: build: add support for running in containers
  * fix: test/functions: FWD_END_TEST: improve grep for errors/warnings
  * fix: test: direct passthrough: no need to check for dummy module
  * fix: test: CHECK_NAT_COEXISTENCE: only check for kernel version
  * fix: reload: let NM interface assignments override permanent config
  * chore: tests: rename IF_IPV6_SUPPORTED to IF_HOST_SUPPORTS_IPV6_RULES
  * fix: tests: convert host ipv6 checks to runtime
  * fix: tests: convert ip6tables checks to runtime
  * fix: tests: convert probe of nft numeric args to runtime
  * fix: tests: convert nftables fib checks to runtime
  * fix: build: distribute testsuite
  * fix: don't probe for available kernel modules
  * fix: failure to load modules no longer fatal
  * fix: tests/functions: canonicalize XML output
  * chore: doc: update authors
  * fix: test: use debug output based on autotest variable
  * fix: src/tests/Makefile: distclean should clean atconfig</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
</package>
<package pkgid="62d95253ec4d393b4da6ae4ef6e9da755014d4df85e76bfafc71a86240b62831" name="python3-jmespath" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150000.3.3.4"/>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 0.4.1
  + No upstream changelog</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 0.5.0
  + No upstream changelog
  + Update in support for fix of bnc#905354</changelog>
  <changelog author="aboe76@gmail.com" date="1427371200">- Updated to version 0.6.1
  + No Upstream Changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.7.0:
  * Add support for JEP-12, raw string literals
  * Support .whl files
- additional changes from version 0.6.2:
  * Implement JEP-10, slice projections
  * Fix bug with filter projection parsing
  * Add to_array function
  * Add merge function
  * Fix error messages for function argument type errors
- point source URL to pypi</changelog>
  <changelog author="rjschwei@suse.com" date="1432728000">- Update to version 0.7.1:
  * Rename ``bin/jp`` to ``bin/jp.py``
  * Fix issue with precedence when parsing wildcard
    projections
  * Remove ordereddict and simplejson as py2.6 dependencies.
    These were never actually used in the jmespath code base,
    only in the unit tests.  Unittests requirements are handled
    via requirements26.txt.</changelog>
  <changelog author="rjschwei@suse.com" date="1453291200">- Manage the jp executable with update-alternatives now that
  python3-jmespath exists
- spec file improvements</changelog>
  <changelog author="rjschwei@suse.com" date="1453291201">- Fix build issues for SLE 11
  + More test dependencies required</changelog>
  <changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 0.9.0
  * Add support for new lines with tokens in an expression
  * Add support for JEP 9 which introduces "and" expressions, "unary"
    expressions, "not" expressions, and "paren" expressions
  * Fix issue with hardcoded path in ``jp.py`` executable
    (issue 90, issue 88, issue 82)
- Update to version 0.8.0
  * Improve lexing performance (issue 84)
  * Fix parsing error for multiselect lists (issue 86)
  * Fix issue with escaping single quotes in literal strings (issue 85)
  * Add support for providing your own dict cls to support
    ordered dictionaries (issue 94)
  * Add map() function (issue 95)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to version 0.9.2
  + Fix regression when using ordering comparators on strings (issue 124)
- From 0.9.1
  + Raise LexerError on invalid numbers (issue 98)
  + Add support for custom functions (#100) (issue 100)
  + Fix ZeroDivisionError for built-in function avg() on empty lists (#115)
    (issue 115)
  + Properly handle non numerical ordering operators (#117) (issue 117)</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- Only BuildRequire unittest2 for python2</changelog>
  <changelog author="jmatejek@suse.com" date="1490788801">- properly Requires(postun) for %postun section</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to 0.9.3:
  + Fix issue where long types in py2 and Decimal types were not
    being evaluated as numbers (issue 125)
  + Handle numbers in scientific notation in to_number() function (issue 120)
  + Fix issue where custom functions would override the function
    table of the builtin function class (issue 133)</changelog>
</package>
<package pkgid="d00b77aa8b2a734621432bf77b48ff4e490b2e56aadf1d1e5d42b628fb3c61e8" name="python3-libxml2" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="ec35664a07d48638bdd86d88df540d243076cad6a61d068d71c975b7a690c98e" name="python3-libxml2" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="b6b60d41fe44b44cdd376f45ac673bf4cf8f932453c94e48bed0e31bab85ba15" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="6cb847ac9d0f4d14842f2baf70d00bf7e34175572ec94a31392fbaddcc4c58aa" name="python3-libxml2" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="e2e524fb6699249d50ba0c22901113662061e8037b72ea636c0b94e3e3e95c79" name="python3-libxml2" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="d0c5de106bd17e37125f45507752dc6e1cd8f21f472ce7498a18cd462216437c" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="b3d2e06c323bda5806b9d6f26501f3a1c12f852cf7b08dd37ca416bfeda00746" name="python3-looseversion" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="150100.3.3.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1679313600">- Initial package: looseversion 1.0.2</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1679486400">- Fix package build with old setuptools versions
- Added:
  * add_compatible_setup_py_file.patch</changelog>
</package>
<package pkgid="8b7b9a0ce90b443640472d91f7486dc2350890a87be9d1c277a7d7ee2cc6674b" name="python3-nftables" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="bf3b45ac9bb5a5c84ee06e838ac6147069056081c7272efffc58e410994eaf2c" name="python3-nftables" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="6e84fec064e6b6c95bf1ba7853201c581f0b9d1400f7d1a5ab069155f66cec35" name="python3-nftables" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="d43a61a0bcd5e41f0a04005a6eabcf62b4dd973432d7fb1b40ec18121deb9c2e" name="python3-packaging" arch="noarch">
  <version epoch="0" ver="21.3" rel="150200.3.3.1"/>
  <changelog author="tbechtold@suse.com" date="1565092800">- update to 19.1:
  * Add the ``packaging.tags`` module.
  * Correctly handle two-digit versions in ``python_version``</changelog>
  <changelog author="dcermak@suse.com" date="1565265600">- Add Requires:python-attrs as this is a new dependency
  this fixes bsc#1144506</changelog>
  <changelog author="dcermak@suse.com" date="1565265601">- Enable tests via _multibuild
  Add patches from https://github.com/pypa/packaging/pull/176:
  * 0001-Fix-test-failures-test_linux_platforms_manylinux-for.patch
  * 0002-Fix-check-for-64-bit-OS.patch
  * 0003-Add-additional-test-to-get-100-branch-coverage.patch
  * 0004-Fix-test_macos_version_detection-failure-on-32-bit-L.patch
  (these fix the tests on non-x86 platforms and can be dropped on the next
  release)</changelog>
  <changelog author="tchvatal@suse.com" date="1565870400">- Fix a bit the multibuild conversion
- Remove the attrs from the deps as they are no longer needed</changelog>
  <changelog author="dcermak@suse.com" date="1566216000">- Remove dependency on attrs
  Add: 0005-Drop-dependency-on-attrs.patch
  this fixes bsc#1144506</changelog>
  <changelog author="tchvatal@suse.com" date="1570536000">- Update to 19.2:
  * Many buildsystem tweaks to accomodate for distribution shipping
- Remove all the merged patches:
  * 0001-Fix-test-failures-test_linux_platforms_manylinux-for.patch
  * 0002-Fix-check-for-64-bit-OS.patch
  * 0003-Add-additional-test-to-get-100-branch-coverage.patch
  * 0004-Fix-test_macos_version_detection-failure-on-32-bit-L.patch
  * 0005-Drop-dependency-on-attrs.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580904000">- Update to 20.1
  * Fix a bug caused by reuse of an exhausted iterator.
  * Add type hints
  * Add proper trove classifiers for PyPy support
  * Scale back depending on ctypes for manylinux support detection
  * Use sys.implementation.name where appropriate for packaging.tags
  * Expand upon the API provded by packaging.tags
  * Officially support Python 3.8
  * Add major, minor, and micro aliases to packaging.version.Version
  * Properly mark packaging has being fully typed by adding a py.typed file</changelog>
  <changelog author="mimi.vx@gmail.com" date="1581336000">- add issue_254.patch to fix tests under non-x86_64 pplatforms</changelog>
  <changelog author="mcalabkova@suse.com" date="1583928000">- Update to 20.3
  * Fix a bug that caused a 32-bit OS that runs on a 64-bit ARM CPU
    (e.g. ARM-v8, aarch64), to report the wrong bitness.
- Drop already upstreamed patch issue_254.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1588680000">- Ignore clamav scan as it bogusly calls one file to be infected
  while it is just a testcase of malformed binary:
  [#]!BuildIgnore: post-build-checks-malwarescan</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 20.4:
  * Canonicalize version before comparing specifiers. (:issue:`282`)
  * Change type hint for ``canonicalize_name`` to return
  ``packaging.utils.NormalizedName``.
  This enables the use of static typing tools (like mypy) to detect mixing of
  normalized and un-normalized names.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 20.8:
  * Revert back to setuptools for compatibility purposes for some Linux distros (:issue:`363`)
  * Do not insert an underscore in wheel tags when the interpreter version number
    is more than 2 digits (:issue:`372`)
  * Fix flit configuration, to include LICENSE files (:issue:`357`)
  * Make `intel` a recognized CPU architecture for the `universal` macOS platform tag (:issue:`361`)
  * Add some missing type hints to `packaging.requirements` (issue:`350`)
  * Officially support Python 3.9 (:issue:`343`)
  * Deprecate the ``LegacyVersion`` and ``LegacySpecifier`` classes (:issue:`321`)
  * Handle ``OSError`` on non-dynamic executables when attempting to resolve
    the glibc version string.</changelog>
  <changelog author="dmueller@suse.com" date="1612267200">- update to 20.9:
  * Run [isort](https://pypi.org/project/isort/) over the code base (:issue:`377`)
  * Add support for the ``macosx_10_*_universal2`` platform tags (:issue:`379`)
  * Introduce ``packaging.utils.parse_wheel_filename()`` and ``parse_sdist_filename()``</changelog>
  <changelog author="dmueller@suse.com" date="1619870400">- add no-legacyversion-warning.patch to restore compatibility with 20.4</changelog>
  <changelog author="code@bnavigator.de" date="1623931200">- Add Provides: for python*dist(packaging): work around boo#1186870
- skip tests failing because of no-legacyversion-warning.patch</changelog>
  <changelog author="dmueller@suse.com" date="1636200000">- update to 21.2:
  * Update documentation entry for 21.1.
  * Update pin to pyparsing to exclude 3.0.0.
  * PEP 656: musllinux support
  * Drop support for Python 2.7, Python 3.4 and Python 3.5.
  * Replace distutils usage with sysconfig
  * Add support for zip files in ``parse_sdist_filename``
  * Use cached ``_hash`` attribute to short-circuit tag equality comparisons
  * Specify the default value for the ``specifier`` argument to ``SpecifierSet``
  * Proper keyword-only "warn" argument in packaging.tags
  * Correctly remove prerelease suffixes from ~= check
  * Fix type hints for ``Version.post`` and ``Version.dev``
  * Use typing alias ``UnparsedVersion``
  * Improve type inference for ``packaging.specifiers.filter()``
  * Tighten the return type of ``canonicalize_version()``</changelog>
  <changelog author="buschmann23@opensuse.org" date="1637755200">- update to 21.3:
  * Add a pp3-none-any tag (gh#pypa/packaging#311)
  * Replace the blank pyparsing 3 exclusion with a 3.0.5 exclusion
    (gh#pypa/packaging#481), (gh#pypa/packaging#486)
  * Fix a spelling mistake (gh#pypa/packaging#479)</changelog>
  <changelog author="hui.zhi.zhao@suse.com" date="1650888000">- Ignore python3.6.2 since the test doesn't support it.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1653825600">- Add patch to fix testsuite on big-endian targets
  + fix-big-endian-build.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
</package>
<package pkgid="79e6e9e37601367b2c03b2d77d7912a91b47978ff54873bf10ce851bf7e5497a" name="python3-ply" arch="noarch">
  <version epoch="0" ver="3.10" rel="150000.3.3.4"/>
  <changelog author="saschpe@suse.de" date="1301400000">- Update to 3.4:
  + Minor patch to make cpp.py compatible with Python 3.
  + Fixed setup.py trove classifiers to properly list PLY as Python
    3 compatible.
- License changed to BSD3c
- Packaged more doc files
- Moved important docs (README, ..) to base package
- Fixed build for non-SUSE distros</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1337947200">- python3 package added</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947201">- spec file cleanups</changelog>
  <changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 3.6:
  * If PLY is unable to create the 'parser.out' or 'parsetab.py'
    files due to permission issues, it now just issues a warning
    message and continues to operate
  * Fixed some issues related to use of packages and table file
    modules
- additional changes from version 3.5:
  * Added support for defaulted_states in the parser
  * Fixed debug logging in the parser
  * Added actions to be defined to character literals (Issue #32)
  * Import of the 'parsetab.py' file is now constrained to only
    consider the directory specified by the outputdir argument to
    yacc()
  * Changed default output directory to be the same as that in
    which the yacc grammar is defined
  * Changed the parsetab.py file signature slightly so that the
    parsetab won't regenerate if created on a different major
    version of Python
  * Fixed Issue #44 call_errorfunc() should return the result of
    errorfunc()
  * Support for versions of Python &lt;2.7 is officially dropped
  * Fixed bug related to calling yacc(start=...)
  * Added skipped tests for PyPy and Java
  * Added filter to make unit tests pass under 'python -3'
  * Fixed CPP_INTEGER regex in ply/cpp.py (Issue 21)
  * Fixed yacc validation bugs when from __future__ import
    unicode_literals is being used
  * Added support for Travis-CI
  * Added a .gitignore file
  * Fixed validation problems for source files that include a
    different source code encoding specifier
  * Fixed unit tests for yacc to eliminate random failures due to
    dict hash value randomization in Python 3.3
  * Fixed comment whitespace processing bugs in ply/cpp.py
  * Fixed token names in ply/ctokens.py to match rule names
  * Changes to functions available in panic mode error recover
  * Fixed some problems with line and position tracking and the use
    of error symbols
  * Change to doc string handling in lex module
  * Fixed issue #1: Fixed _tabversion. It should use __tabversion__
    instead of __version__
  * Fixed issue #8: Literals empty list causes IndexError
  * Fixed issue #12: Typo in code snippet in documentation
  * Fixed issue #10: Correctly escape t_XOREQUAL pattern.
- clean the test and example directories
- remove stray backup files in doc
- remove unneeded executable bit of testlex.py
- remove CFLAGS export: unneeded
- do not drop executable bit of everything in test since
  it contains subdirectories
- remove useless clean section
- remove README from package: not provided anymore</changelog>
  <changelog author="hpj@urpla.net" date="1444219200">- update to version 3.8:
  * Fixed issues related to Python 3.5. Patch contributed by Barry Warsaw.
- update to version 3.7
  * Fixed problems when reading table files from pickled data.
  * Fixed regression in handling of table modules if specified as module
    objects.   See https://github.com/dabeaz/ply/issues/63
- clean up spec
- add testing rig</changelog>
  <changelog author="tbechtold@suse.com" date="1472817600">- update to 3.9:
  * Exposed the parser state number as the parser.state attribute
    in productions and error functions.
  * Fixed Issue #88. Python3 compatibility with ply/cpp.
  * Fixed Issue #93. Ply can crash if SyntaxError is raised inside
    a production.   Not actually sure if the original implementation
    worked as documented at all.  Yacc has been modified to follow
    the spec as outlined in the CHANGES noted for 11/27/07 below.
  * Fixed Issue #97. Failure with code validation when the original
    source files aren't present.   Validation step now ignores
    the missing file.
  * Minor fixes to version numbers.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10
  * Changed grammar signature computation to not involve hashing
    functions. Parts are just combined into a big string.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
</package>
<package pkgid="1d239f91c8ffd7fbdad24a58db41567111bf8ba34588b29d164d8549d3deed33" name="python3-pyzmq" arch="aarch64">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="cd24ce77e880a71170518d168203d1d629f43d4fa0e17fab71f6fd6195511dc6" name="python3-pyzmq" arch="s390x">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="e2d9d07654cffc31e5199f40aa1ba9fee1e114c4ca5abd78f7fdc78b2e6cc21a" name="python3-pyzmq" arch="x86_64">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="c0b8b5cc0c77a33062971472acdb4fc87ec5cdec6edec5fe04cee55a3d6b1dfc" name="python3-requests" arch="noarch">
  <version epoch="0" ver="2.24.0" rel="150300.3.3.1"/>
  <changelog author="aplanas@suse.com" date="1520424000">- Allows Recommends and Suggest in Fedora</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530532800">- update to version 2.19.1:
  * Fixed issue where status_codes.py’s init function failed trying
    to append to a __doc__ value of None.
- update to version 2.19.0:
  * Improvements
    + Warn about possible slowdown with cryptography version &lt; 1.3.4
    + Check host in proxy URL, before forwarding request to adapter.
    + Maintain fragments properly across redirects. (RFC7231 7.1.2)
    + Removed use of cgi module to expedite library load time.
    + Added support for SHA-256 and SHA-512 digest auth algorithms.
    + Minor performance improvement to Request.content.
    + Migrate to using collections.abc for 3.7 compatibility.
  * Bugfixes
    + Parsing empty Link headers with parse_header_links() no longer
    return one bogus entry.
    + Fixed issue where loading the default certificate bundle from
    a zip archive would raise an IOError.
    + Fixed issue with unexpected ImportError on windows system
    which do not support winreg module.
    + DNS resolution in proxy bypass no longer includes the username
    and password in the request. This also fixes the issue of DNS
    queries failing on macOS.
    + Properly normalize adapter prefixes for url comparison.
    + Passing None as a file pointer to the files param no longer
    raises an exception.
    + Calling copy on a RequestsCookieJar will now preserve the
    cookie policy correctly.
  * We now support idna v2.7 and urllib3 v1.23.
- Properly set idna/urllib3 dependency versions, runtime and buildtime
- Spec cleanup, remove conditionals for ancient distro versions
- Remove duplicates with fdupes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1531742400">- make multibuild package to resolve circular deps on tests</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532001600">- -test subpackage must be empty</changelog>
  <changelog author="arun@gmx.de" date="1540036800">- specfile:
  * remove devel for noarch
  * remove restriction for urllib3 &lt; 1.24
  * HISTORY and README changed from .rst to .md
- update to version 2.20.0 bsc#1111622:
  * Bugfixes
    + Content-Type header parsing is now case-insensitive
    (e.g. charset=utf8 v Charset=utf8).
    + Fixed exception leak where certain redirect urls would raise
    uncaught urllib3 exceptions.
    + Requests removes Authorization header from requests redirected
    from https to http on the same hostname. (CVE-2018-18074)
    + should_bypass_proxies now handles URIs without hostnames
    (e.g. files).
  * Dependencies
    + Requests now supports urllib3 v1.24.
  * Deprecations
    + Requests has officially stopped support for Python 2.6.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Ensure neutrality of descriptions.</changelog>
  <changelog author="arun@gmx.de" date="1542974400">- update to version 2.20.1:
  * Bugfixes
    + Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
  <changelog author="mcepl@suse.com" date="1546257600">- Move name ahead of version in spec file to resolve build issues
  on older distributions
- fdupe more thoroughly.</changelog>
  <changelog author="jbrownell@suse.com" date="1547035200">- Support older Red Hat platforms that don't offer "Recommends:"</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)
- Switch off test_https_warnings test (bsc#1170175)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686657600">- Add CVE-2023-32681.patch to fix unintended leak of
  Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
  Upstream commit: gh#psf/requests@74ea7cf7a6a2</changelog>
</package>
<package pkgid="34fe2bcd2dcb868afd91b7f725f323dc2f020cb62c28441c0ea29d2a5d29be7d" name="python3-rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="0cbe8561d5cc398eeac53f7bcdb05a630919a36bebda56e3486c3a3d827c9cde" name="python3-rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="80253b50bb4a25c8e2ce019f722d61fac14c7cff409b8cf9e9ef16ab3a5d0899" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="01a7a3e676187acd3892b53433d0fd9a0541ad474c530ee9f34fcae1f8616395" name="python3-s3transfer" arch="noarch">
  <version epoch="0" ver="0.6.0" rel="150200.9.7.1"/>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to version 0.1.11:
  + Properly handle unicode exceptions in the context manager</changelog>
  <changelog author="mimi.vx@gmail.com" date="1524139200">- update to 0.1.13 (bsc#1075263)
- add system-requests.patch - use system python-requests
  * Plumb ``RequestPayer` argument to the ``CompleteMultipartUpload` operation
  * enhancement:max_bandwidth: Add ability to set maximum bandwidth consumption
  for streaming of S3 uploads and downloads</changelog>
  <changelog author="tchvatal@suse.com" date="1525780800">- Make sure to really not use any damn bundles:
  * no-bundled-packages.patch
  * Never rely on some bundled package version just use system libs
- Enable testsuite and make it pass thanks to above patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Avoid running tests on 32bit as they fail there on oom</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550059200">- Update to version 0.2.0
  * feature:``ProcessPoolDownloader``: Add ``ProcessPoolDownloader`` class
    to speed up download throughput by using processes instead of threads.
- Drop obsolete patch
  + system-requests.patch
- Refresh patches for new version
  + hide_py_pckgmgmt.patch
  + no-bundled-packages.patch
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1560340800">- Update to version 0.2.1 (bsc#1146853)
  * enhancment:ProcessPool: Adds user agent suffix.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1566475200">- Update in SLE-15 (bsc#1146854)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1580126400">- Update to version 0.3.2
  * bugfix:s3: Fixes boto/botocore`#1916 &lt;https://github.com/boto/botocore/issues/1916&gt;`__
- from version 0.3.1
  * enhancement:TransferManager: Expose client and config properties
  * enhancement:Tags: Add support for Tagging and TaggingDirective
- from version 0.3.0
  * feature:Python: Dropped support for Python 2.6 and 3.3.
- Refresh patches for new version
  + hide_py_pckgmgmt.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1582804800">- Update to 0.3.3:
  * bugfix:dependency: Updated botocore version range
- Drop patch hide_py_pckgmgmt.patch it should not be needed
  * we updated setuptools on SLE 12 to handle complex dependencies
- Use pytest for test execution:
  * the nose is used by upstream but really not needed and it
    will get borked with python 3.10</changelog>
  <changelog author="tchvatal@suse.com" date="1583841600">- Skip test failing on python 3.8, it is race condition that needs
  to be fixed in tests</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix build without python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1586260800">- Fix build on SLE-12
  + Add python to BuildRequires for suse_version &lt; 1500
  + Add python-scandir to BuildRequires for suse_version &lt; 1500</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1586520000">- Update in SLE-15 (bsc#1168943)</changelog>
  <changelog author="rjschwei@suse.com" date="1606392000">- Only build Python3 flavors for distributions 15 and greater</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to 0.3.4:
  * enhancement:s3: Add server side encryption context into allowed list</changelog>
  <changelog author="alarrosa@suse.com" date="1621425600">- Update to 0.4.2:
  * enhancement:s3: Add support for ExpectedBucketOwner. Fixes #181.
- Update to 0.4.1:
  * enhancement:crt: Add set_exception to CRTTransferFuture to allow setting exceptions in subscribers.
- Update to 0.4.0:
  * feature:crt: Add optional AWS Common Runtime (CRT) support. The AWS CRT provides a C-based S3 transfer client that can improve transfer throughput.
- Update to 0.3.7:
  * bugfix:ReadFileChunk: Fix seek behavior in ReadFileChunk class
- Update to 0.3.6:
  * bugfix:packaging: Fix setup.py metadata for futures on Python 2.7
- Update to 0.3.5:
  * enhancement:s3: Block TransferManager methods for S3 Object Lambda resources</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1627387200">- Update 0.5.0: (bsc#1189649)
  * feature:Python: Dropped support for Python 2.7
- Disable Python2 builds for all SUSE distributions
- Remove Python2 build dependencies from spec file</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1654257600">- Update to 0.6.0
  * feature:Python: Dropped support for Python 3.6
- from version 0.5.2
  * enhancement:``s3``: Added support for flexible checksums
    when uploading or downloading objects.
- from version 0.5.1
  * enhancement:Python: Officially add Python 3.10 support
- Drop unused python-mock dependency from BuildRequires
- Refresh patches for new version
  + no-bundled-packages.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667476800">- Update in SLE-15 (bsc#1204537, jsc#PED-2333)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680696000">- Update in SLE-15 (bsc#1209255, jsc#PED-3780)
- Add python-python-dateutil and python-jmespath to BuildRequires</changelog>
</package>
<package pkgid="b02f1bb5186a1d50b506b3b84fc6a5282c229026dc35459b868c8831a6fea0ce" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="7b8ccdb35ef4541fcc1d13a484dd3a87338d698b80fcfc0a6d95b0f058f747fd" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="dc1427ef2cdfc8e1ebd26d68318522a201ab98f435ed01cac4fd6466860e4775" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="ec6eee0675746d18ae759ef544981531f8746ba8bf20fd5c2f687fe4ce29c483" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="9a90b2d7038bd359a0cb94d54e162c9fb5068a2cebe1534a14aecb757241d991" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="d8337b0796a54cb7f75fb6c9e21273016e497885c5852ff6f399b37d8112051a" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="f1d8043f6cfad0913ad3d92ab8157e1ef92c0a2a98f60d759f60ce0940c43610" name="python3-setuptools" arch="noarch">
  <version epoch="0" ver="44.1.1" rel="150400.9.3.3"/>
  <changelog author="arun@gmx.de" date="1556971200">- update to version 41.0.1:
  * #1671: Fixed issue with the PEP 517 backend that prevented
    building a wheel when the dist/ directory contained existing .whl
    files.
  * #1709: In test.paths_on_python_path, avoid adding unnecessary
    duplicates to the PYTHONPATH.
  * #1741: In package_index, now honor "current directory" during a
    checkout of git and hg repositories under Windows</changelog>
  <changelog author="tchvatal@suse.com" date="1566388800">- Update to 41.2.0:
  * #479: Remove some usage of the deprecated imp module.
  * #1565: Changed html_sidebars from string to list of string as per https://www.sphinx-doc.org/en/master/changes.html#id58
  * #1697: Moved most of the constants from setup.py to setup.cfg
  * #1756: Forse metadata-version &gt;= 1.2. when project urls are present.</changelog>
  <changelog author="tchvatal@suse.com" date="1566388801">- Switch to multibuild to enable testsuite</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Define LANG in %check to fix openSUSE/SLE 15 testsuite</changelog>
  <changelog author="mcalabkova@suse.com" date="1570795200">- Update to 41.4.0
  * In declarative config, now traps errors when invalid python_requires
    values are supplied.
  * When storing extras, rely on OrderedSet to retain order of extras
    as indicated by the packager, which will also be deterministic
    on Python 2.7 (with PYTHONHASHSEED unset) and Python 3.6+.
  * Fixed failing integration test triggered by 'long_description_content_type' in packaging.</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Add patch to sort outputs for better reproducability:
  * sort-for-reproducibility.patch
- Add missing dep on ordered-set as it is now in the vendored
  dir too</changelog>
  <changelog author="tchvatal@suse.com" date="1571227201">- Try to use system packages rather than the vendored variants</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1571313600">- Remove runtime dependency for the full python3 package, as the
  actually required SSL module is in python3-base. For python(2),
  SSL is in the "full" python package. Avoids build loops and
  shortens the dependency chain for e.g. rust.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1573473600">- update to 41.6.0
- add importlib.patch
  * Replace usage of deprecated imp module with local
    re-implementation in setuptools._imp
  * Fix pkg_resources.Requirement hash/equality implementation
  * Fix tests when running under python3.10.
  * drop 'deprecated' documentation (test command, ez_setup, EasyInstall)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580817600">- update to 44.0.0
- last version with python2 support
- add testdata.tar.gz -&gt; missing data for testsuite
  * Drop support for Python 3.4.
  * include pyproject.toml in source distribution by default.
    Projects relying on the previous behavior where pyproject.toml
  * Setuptools once again declares 'setuptools' in the build-system.requires
    and adds PEP 517 build support by declaring itself as the build-backend
  * Fix support for easy_install's find-links option in setup.cfg
  * Build dependencies (setup_requires and tests_require) now install transitive
    dependencies indicated by extras.
  * Mark the easy_install script and setuptools command as deprecated, and use
    pip when available to fetch/build wheels for missing setup_requires/tests_require
    requirements, with the following differences in behavior:
    + support for python_requires
    + better support for wheels (proper handling of priority with respect to PEP 425 tags)
    + PEP 517/518 support
    + eggs are not supported
    + no support for the allow_hosts easy_install option (index_url/find_links are still honored)
    + pip environment variables are honored (and take precedence over easy_install options)
  * Removed the "upload" and "register" commands in favor of twine.
  * Add support for the license_files option in setup.cfg to automatically
    include multiple license files in a source distribution.
  * Update handling of wheels compatibility tags: * add support for manylinux2010
  * fix use of removed 'm' ABI flag in Python 3.8 on Windows
  * Fix empty namespace package installation from wheel.
  * Setuptools now exposes a new entry point hook "setuptools.finalize_distribution_options",
    enabling plugins like setuptools_scm to configure options on the distribution
    at finalization time.</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix build without python2</changelog>
  <changelog author="mcepl@suse.com" date="1586174400">- Fix License to the correct MIT</changelog>
  <changelog author="code@bnavigator.de" date="1592913600">- use local source dir for pytest imports
  gh#openSUSE/python-rpm-macros#48</changelog>
  <changelog author="mimi.vx@gmail.com" date="1597320000">- update to 44.1.0
  * Set sys.argv[0] in setup script run by build_meta.__legacy__
  * Fix for Python 4: replace unsafe six.PY3 with six.PY2
  * Fixed a bug in the “setuptools.finalize_distribution_options” hook
    that lead to ignoring the order attribute of entry points managed
    by this hook.
  * Avoid loading working set during Distribution.finalize_options prior
    to invoking _install_setup_requires, broken since v42.0.0.</changelog>
  <changelog author="mcepl@suse.com" date="1605009600">- Add wheel subpackage with the generated wheel for this package
  (bsc#1176262, CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1605182400">- Make wheel a separate build run to avoid the setuptools/wheel build
  cycle.</changelog>
  <changelog author="mcepl@suse.com" date="1605528000">- Avoid duplicite wheel name in the generated package, and we actually
  don't need a subpackage at all.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Add remove_mock.patch to remove dependency on the external mock
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1611316800">- We cannot remove vendored packages when generating setuptools
  wheel (bsc#1177127).</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- Rename package sources from python- to python3 for PSP (jsc#PED-68, jsc#PED-2217)</changelog>
</package>
<package pkgid="24e4dc957c22433f04b0b3edcd4a97a34c55059d90a002b30959c85cb85dfe90" name="python3-setuptools" arch="src">
  <version epoch="0" ver="44.1.1" rel="150400.9.3.3"/>
  <changelog author="arun@gmx.de" date="1556971200">- update to version 41.0.1:
  * #1671: Fixed issue with the PEP 517 backend that prevented
    building a wheel when the dist/ directory contained existing .whl
    files.
  * #1709: In test.paths_on_python_path, avoid adding unnecessary
    duplicates to the PYTHONPATH.
  * #1741: In package_index, now honor "current directory" during a
    checkout of git and hg repositories under Windows</changelog>
  <changelog author="tchvatal@suse.com" date="1566388800">- Update to 41.2.0:
  * #479: Remove some usage of the deprecated imp module.
  * #1565: Changed html_sidebars from string to list of string as per https://www.sphinx-doc.org/en/master/changes.html#id58
  * #1697: Moved most of the constants from setup.py to setup.cfg
  * #1756: Forse metadata-version &gt;= 1.2. when project urls are present.</changelog>
  <changelog author="tchvatal@suse.com" date="1566388801">- Switch to multibuild to enable testsuite</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Define LANG in %check to fix openSUSE/SLE 15 testsuite</changelog>
  <changelog author="mcalabkova@suse.com" date="1570795200">- Update to 41.4.0
  * In declarative config, now traps errors when invalid python_requires
    values are supplied.
  * When storing extras, rely on OrderedSet to retain order of extras
    as indicated by the packager, which will also be deterministic
    on Python 2.7 (with PYTHONHASHSEED unset) and Python 3.6+.
  * Fixed failing integration test triggered by 'long_description_content_type' in packaging.</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Add patch to sort outputs for better reproducability:
  * sort-for-reproducibility.patch
- Add missing dep on ordered-set as it is now in the vendored
  dir too</changelog>
  <changelog author="tchvatal@suse.com" date="1571227201">- Try to use system packages rather than the vendored variants</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1571313600">- Remove runtime dependency for the full python3 package, as the
  actually required SSL module is in python3-base. For python(2),
  SSL is in the "full" python package. Avoids build loops and
  shortens the dependency chain for e.g. rust.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1573473600">- update to 41.6.0
- add importlib.patch
  * Replace usage of deprecated imp module with local
    re-implementation in setuptools._imp
  * Fix pkg_resources.Requirement hash/equality implementation
  * Fix tests when running under python3.10.
  * drop 'deprecated' documentation (test command, ez_setup, EasyInstall)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580817600">- update to 44.0.0
- last version with python2 support
- add testdata.tar.gz -&gt; missing data for testsuite
  * Drop support for Python 3.4.
  * include pyproject.toml in source distribution by default.
    Projects relying on the previous behavior where pyproject.toml
  * Setuptools once again declares 'setuptools' in the build-system.requires
    and adds PEP 517 build support by declaring itself as the build-backend
  * Fix support for easy_install's find-links option in setup.cfg
  * Build dependencies (setup_requires and tests_require) now install transitive
    dependencies indicated by extras.
  * Mark the easy_install script and setuptools command as deprecated, and use
    pip when available to fetch/build wheels for missing setup_requires/tests_require
    requirements, with the following differences in behavior:
    + support for python_requires
    + better support for wheels (proper handling of priority with respect to PEP 425 tags)
    + PEP 517/518 support
    + eggs are not supported
    + no support for the allow_hosts easy_install option (index_url/find_links are still honored)
    + pip environment variables are honored (and take precedence over easy_install options)
  * Removed the "upload" and "register" commands in favor of twine.
  * Add support for the license_files option in setup.cfg to automatically
    include multiple license files in a source distribution.
  * Update handling of wheels compatibility tags: * add support for manylinux2010
  * fix use of removed 'm' ABI flag in Python 3.8 on Windows
  * Fix empty namespace package installation from wheel.
  * Setuptools now exposes a new entry point hook "setuptools.finalize_distribution_options",
    enabling plugins like setuptools_scm to configure options on the distribution
    at finalization time.</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix build without python2</changelog>
  <changelog author="mcepl@suse.com" date="1586174400">- Fix License to the correct MIT</changelog>
  <changelog author="code@bnavigator.de" date="1592913600">- use local source dir for pytest imports
  gh#openSUSE/python-rpm-macros#48</changelog>
  <changelog author="mimi.vx@gmail.com" date="1597320000">- update to 44.1.0
  * Set sys.argv[0] in setup script run by build_meta.__legacy__
  * Fix for Python 4: replace unsafe six.PY3 with six.PY2
  * Fixed a bug in the “setuptools.finalize_distribution_options” hook
    that lead to ignoring the order attribute of entry points managed
    by this hook.
  * Avoid loading working set during Distribution.finalize_options prior
    to invoking _install_setup_requires, broken since v42.0.0.</changelog>
  <changelog author="mcepl@suse.com" date="1605009600">- Add wheel subpackage with the generated wheel for this package
  (bsc#1176262, CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1605182400">- Make wheel a separate build run to avoid the setuptools/wheel build
  cycle.</changelog>
  <changelog author="mcepl@suse.com" date="1605528000">- Avoid duplicite wheel name in the generated package, and we actually
  don't need a subpackage at all.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Add remove_mock.patch to remove dependency on the external mock
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1611316800">- We cannot remove vendored packages when generating setuptools
  wheel (bsc#1177127).</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- Rename package sources from python- to python3 for PSP (jsc#PED-68, jsc#PED-2217)</changelog>
</package>
<package pkgid="64bffebb6b6de6547cba2e4e6e6888d55bba5d8f7641cfd1754a9c6ca2b6d17f" name="python3-simplejson" arch="aarch64">
  <version epoch="0" ver="3.17.2" rel="150300.3.2.3"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="d77cefa037cc0c36880bee663c95b8635ebd878e8e61d417f4bdb6e8255abd0a" name="python3-simplejson" arch="s390x">
  <version epoch="0" ver="3.17.2" rel="150300.3.2.3"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="57a20c3ba52c22a2d6eba23c8ab56aa421ff80c9e2adba7ebe35c087dad8b241" name="python3-simplejson" arch="x86_64">
  <version epoch="0" ver="3.17.2" rel="150300.3.2.3"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="6a604b842e13211b3e3e80dbb32b47ef632af883320383ba567d589f620a14f5" name="qemu" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="cc24458135b95395f6affdaa782df20f9386481cc888f0e48d9ab3aaf3bc7025" name="qemu" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="f15ecedcfb93a670ab019d626cd18168cc673ef5ae05bf1b1f052525695e4d5d" name="qemu" arch="src">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="7de4a2a6156172663ad9ccad75954d759ea1060eecb640d8b9e1074c019477d7" name="qemu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="1efe924b0393b6cb75416d05d568709485e6f576f8509bdc20bbae7773ae1695" name="qemu" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="c24781da84cf05d80558addaeb12d5a8b35915065f422b947413ee58079a4ee1" name="qemu" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="700e1c130501546bf06460756594fcd37feb370263325842a4d5f57067109929" name="qemu" arch="src">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="59cd5433d830ed654d7dcb57f5c930c5affc5002f6d93434a790f9dbd4a09e58" name="qemu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="5362c8369e1fff0f9aec754c9799587239c6c0b9bbbd3731d3b3aa80d50b6359" name="qemu-accel-tcg-x86" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="35cd2256974c320f4b145b462bb8536f356edc0a9770779d777ae4c984f9930f" name="qemu-accel-tcg-x86" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="d8050f8b794e469c64776d33c799f8aea444d0a7d7491a90fbef9a928f4889e2" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="cef139d2e7df19efd223729289a1323e591c7c235dddcfb0c84f140e41b05f0f" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="102d2d636d553075d5b39c5adaf6a6a529203596ff4c27ae1d4b7c6cab3c7977" name="qemu-audio-spice" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="f47f636f6e5b2eeb5307c9312eada2c9b51ffe78f6c6f158a0d53c2885b56e43" name="qemu-audio-spice" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="b91c55e69ae421532b27ff431fee32b6b0230f837d985cb9ca325c1def1ab03e" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="82523a42ea9b9e57037fe1c207867143007269eac47c7ace33e103331090dbb2" name="qemu-audio-spice" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="1ae1c32fb8b31cc5ae5ae6cabf32846ae51680cc7ea9b2871563a61d0a8a8612" name="qemu-audio-spice" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="21a9a6b34b8715f577f8d6a935b115fe501e8032ff8c83e4d076c858a8a5f32a" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="793d9486916f0021e950873c930c03c0b5051714ad02689bf47b58a5bf42bcba" name="qemu-chardev-spice" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="a1ed0f54c17197508a48b51c007a6a5e4a61f265b8b4e59cf7d4b1d34c3f23be" name="qemu-chardev-spice" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="140ea36b260f1b088d0756d13c76d96a83566d3cf6b32c903bee76002f5d1520" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="29476c4f21fff20a34ec9fc30c2439771a172c0a8f05f27e3b08932a60c55778" name="qemu-chardev-spice" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="4676352caeaef515f198872a600c28dd0e8f6bc5930cec230f9ece49fa22b448" name="qemu-chardev-spice" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="0b7a2fdc3b1f527be8ad1e97f7bc27c7c4e4ef91f3aef89f5ba907ea8586326f" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="2bd6128b945f9158ef6bed6b1e49d2a120fb13d869596518f4ddcace17c5f162" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="37a70f166838090085654f7e83b4ead1d692c5114892b07eabf1717cb3162706" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="f2a78c2e3183d8424997a03a500b863b1175d1c76dfe99b6440a365b4f9d7692" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="b03c549d14a417f4f2e89c22fbfc801901831679dd1c104b1e001ce8868cc644" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="100f9f0c666c77da03da7e76be792b613e4bc4b70fa498ff993fdf860b1091d5" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="10357050b1d5bb8253cf59698ed37851564a3eb5a769e8d3728fa8c6b9c6b0ba" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="7fa9e4333ac5f1380734d4754e1951e40925bbffee5fd48d8f77dc09fab16a23" name="qemu-hw-display-qxl" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="e70fcfb47a044faee008779ad18780f466dfb5874d58c4f55e19e681729436f8" name="qemu-hw-display-qxl" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="7cb61dba36cc769b6f3f58ae29fc66e6889c71a63ca0c8e29a24d7423fb97377" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="2a0125f560e9f54a53c75c8a837ec62dd9d9ae023d64ba5bfcf7097087223821" name="qemu-hw-display-qxl" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="82c5c8560c380c6e8a814ba36c161a427256254382f7f862b06ad9eef310b176" name="qemu-hw-display-qxl" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="0ef5d26431b84c61b1dd4ff493f388c50389f2589b8fe02cf37ea764f40712f0" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="eb27639aa73da2db9973d3c2c246d91dbbee0b1049a7c70ad1a6ecdab16bfb3c" name="qemu-hw-display-virtio-gpu" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="4a9ba08a187f4fb7daf5b21b5c519274faa4544d5d68cea3d2e28fb6d66e4e97" name="qemu-hw-display-virtio-gpu" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="3e7492687fdbaa4c2ffaf5341c8e2d1808b7b2fd588f85048ad956f4a370741e" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="ab3b1cbbaa83ed7ac3982bf05ed96bf6d106d3ca1827a8c80686fd9bc3302206" name="qemu-hw-display-virtio-gpu" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="0e6885f7f0199bb43184ef0d0b851245deec2f711f4ae67953d1848f28449345" name="qemu-hw-display-virtio-gpu" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="cc98c6b1276255326af8d33f610943116295f777849a6e6f6742cc4993aa1186" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="89afa5772fe79c15baee04795c81f0ad8362444b0e159040048a5f1a0a67164b" name="qemu-hw-display-virtio-vga" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="e318c483355658f6391cbdf4d353c34fd48d66b5d19053b162be1748b03fa4a8" name="qemu-hw-display-virtio-vga" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="7ec885929dcedd34b2e5d08d308687586e442dc1d61c5532fe8cbda25a55ae39" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="75e9f0e47ad2bcc107eacda507cb42a7f47683a8ad4a9ba657d49de9f5b9b6b9" name="qemu-hw-display-virtio-vga" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="324c6a20d8b3ffeca4802fdb0080d3c3cab0bc33c8460a2e44ec914fb60404d5" name="qemu-hw-display-virtio-vga" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="20d2cfb8cda9762ecc6ab2233dce61aebb34b2195f0d8c8bdea8351e29cb7e8e" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="a16b2c7bb9fc2d2443131a6834195eca1ba1dfbf824a5acc2a4125e276d52a00" name="qemu-hw-usb-redirect" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="a2ca85efa8723838994f801dc216842d1539850707a49f1e043f6e32981768fc" name="qemu-hw-usb-redirect" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="794616e4b5164892707526998c8905bb32a5ad4bc6cb79ef42ee533aef1fc377" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="117eaa1c89e7d0e36abc19509991e544f7aae34fd3cc4a104cd5e16fb462a581" name="qemu-hw-usb-redirect" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="211a5174c81257e358d027b03608727fc88b6e710c9a2daef4ea005f251a664e" name="qemu-hw-usb-redirect" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="d836b89d8012c3c7a08cbec887823ccbee12904f8e741e595c840737f77203c3" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="6d07f593f194669e40cedb6e5d5456cbec90bbdcc6c228cedb4a502c22944254" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="2e174833a62b258ee0fa5eb0e74a24f062578301dd591db6f231a9860160f6c8" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="2af5dd1c93fe762891cca502fdc3e852e5306cb840da7d8653227a66c4d39ae2" name="qemu-ovmf-x86_64" arch="noarch">
  <version epoch="0" ver="202202" rel="150400.5.10.1"/>
  <changelog author="glin@suse.com" date="1625832000">- Add ovmf-fix-xen-s3-detection.patch to fix the S3 detection in
  ovmf-xen
- Add ovmf-xen-add-qemu-kernel-loader-fs.patch to add
  QemuKernelLoaderFsDxe to ovmf-xen to load kernel from qemu fw_cfg</changelog>
  <changelog author="jlee@suse.com" date="1634212800">- Update to edk2-stable202108
  - Features (https://github.com/tianocore/edk2/releases):
  OvmfPkg: remove Xen support from OvmfPkg*.dsc, in favor of OvmfXen.dsc
  Add CLANGDWARF toolchain for generating ELF+DWARF
  NetworkPkg/IScsiDxe: remotely exploitable buffer overflows
  NetworkPkg/IScsiDxe: add sha256 support to CHAP
  Create header files and multiple Hobs for Universal Payload
  Add search feature in config editor
  Add additional build option to treat Dynamic Pcd as DynamicEx Pcd
  Add a new MicrocodeLib for microcode loading
  Implement key enrolment from default key variables
  StandaloneMm support for 32bit Arm machines
  Add firmware support for Cloud Hypervisor on arm64
  Support architecture-specific openssl acceleration
  Support measured AMD SEV boot with kernel/initrd/cmdline
  Add ACPI 6.4 header
  Add new BootDiscoveryPolicyUiLib
  - Patches (git log --oneline --reverse edk2-stable202105~..edk2-stable202108):
  e1999b264f ArmPkg/ArmGic: Fix maximum number of interrupts in GICv3
  b8ed8c0fb2 Maintainers.txt: add Sami Mujawar as top-level ArmVirtPkg reviewer
  dbc22a1785 UefiCpuPkg/MpInitLib: Allocate a separate SEV-ES AP reset stack area
  0095070e70 MdePkg/Register/Amd: expand the SEV MSR to include the SNP definition
  f828fc9876 MdePkg/Register/Amd: realign macros with more space for future expansion
  34e16ff883 MdePkg/Register/Amd: define GHCB macros for hypervisor feature detection
  f0983b2074 MdePkg/Register/Amd: define GHCB macro for Register GPA structure
  4665fa6503 MdePkg/Register/Amd: define GHCB macro for the Page State Change
  dfd41aef78 MdePkg/Register/Amd: define GHCB macros for SNP AP creation
  5a7cbd54a1 MdePkg/BaseLib: add support for PVALIDATE instruction
  2b5b2ff04d MdePkg/BaseLib: add support for RMPADJUST instruction
  901a9bfc3a OvmfPkg/BaseMemEncryptSevLib: introduce MemEncryptSevClearMmioPageEncMask()
  c394fa4c9e OvmfPkg/AmdSevDxe: use MemEncryptSevClearMmioPageEncMask() to clear EncMask
  8ee4e52ba8 OvmfPkg/QemuFlashFvbServicesRuntimeDxe: use Mmio helper to clear enc mask
  b4a8de5d27 OvmfPkg/TpmMmioSevDecryptPei: use MemEncryptSevClearMmioPageEncMask()
  adfa3327d4 OvmfPkg/BaseMemEncryptSevLib: remove Flush parameter
  fe5da0927a IntelFsp2WrapperPkg: Remove microcode related PCDs
  d3ff5dbe1d MdePkg: MmControl: Fix function and structure definition mismatches
  197e27c90a MdePkg: Add new 16550-compatible Serial Port Subtypes to DBG2
  fdf3666f01 MdePkg: Update DBG2 and SPCR header with NVIDIA 16550 Subtype
  b233eb1849 EmbeddedPkg/RealTimeClockRuntimeDxe: Improve GetWakeupTime
  b5379899b3 MdeModulePkg/Xhci: Fix TRT when data length is 0
  039e07f626 MdePkg/MdeModulePkg: Move AML_NAME_SEG_SIZE definition
  1f515342d8 DynamicTablesPkg: Use AML_NAME_SEG_SIZE define
  75e9154f81 OvmfPkg/VirtioMmioDeviceLib: Add EFIAPI to VirtioMmioSetQueueAddress
  c410ad4da4 MdePkg/BaseLib: Fix AsmReadSs() with GCC toolchain
  c1aa3bab12 BaseTools: Add ClangBase.lds for CLANG8 tool chain with max-page-size
  c6b872c6ab BaseTools GenFw: Support CLANG8ELF with conversion ELF to PE/COFF image
  cf9959adff BaseTools: Update build_rule to skip CLANG resource section generation
  4b56ad2049 BaseTools: Add new CLANG8ELF tool chain for new LLVM/CLANG8
  e1636fe18f BaseTools: Update ClangBase.lds to keep dynamic section
  924c2b847f BaseTools: Change CLANG8ELF to CLANGDWARF
  e25566cd2b OvmfPkg: remove the Xen drivers from the IA32, IA32X64, and X64 platforms
  aa7f19f480 OvmfPkg: remove the Xen drivers from the AmdSev platform
  7bc04a75a7 OvmfPkg: switch IA32, IA32X64, X64 to the fw_cfg-only ACPI platform driver
  d697037446 OvmfPkg: switch the AmdSev platform to the fw_cfg-only ACPI platform driver
  ae4aa4a346 OvmfPkg/README: bump minimum QEMU version to 1.7.1, machine types to 1.7
  2a85d9b07e OvmfPkg/AcpiPlatformDxe: fix header file warts
  180f1908b3 OvmfPkg/AcpiPlatformDxe: sort #includes and [LibraryClasses]
  6d1e56e715 OvmfPkg/AcpiPlatformDxe/QemuLoader.h: remove QemuFwCfgLib class dependency
  747b1ef725 OvmfPkg/AcpiPlatformDxe: move "QemuLoader.h" to IndustryStandard
  cc302b799e OvmfPkg/AcpiPlatformDxe: consolidate #includes and [LibraryClasses]
  c9bba52fc7 OvmfPkg/XenAcpiPlatformDxe: create from AcpiPlatformDxe
  a31fcb5096 OvmfPkg/AcpiPlatformDxe: remove the "AcpiPlatformDxe.inf" driver
  4115840c28 OvmfPkg/XenAcpiPlatformDxe: remove the QEMU ACPI linker/loader client
  d6ba8aa6ef OvmfPkg/XenAcpiPlatformDxe: remove QEMU fw_cfg dependency
  3f975ee570 OvmfPkg/XenAcpiPlatformDxe: remove the InstallAcpiTable() helper function
  8f8d3d90c5 OvmfPkg/XenAcpiPlatformDxe: remove OVMF's built-in ACPI tables
  4174c5c787 OvmfPkg/Bhyve/AcpiPlatformDxe: fix file path typo in comment
  d491c88a0c OvmfPkg/AcpiTables: remove unused module
  e7641171b6 OvmfPkg/OvmfXen: make "PcdPciDisableBusEnumeration" Fixed-at-Build
  3357ac7380 OvmfPkg/XenAcpiPlatformDxe: remove delayed ACPI table installation
  d06eb2d1d9 OvmfPkg/PlatformPei: remove Xen support
  8899e3fe6a OvmfPkg: drop PcdPciDisableBusEnumeration from the IA32, IA32X64, X64 DSCs
  2833589ad0 OvmfPkg: drop PcdPciDisableBusEnumeration from the AmdSev platform
  e43cca74ad OvmfPkg/Bhyve: make "PcdPciDisableBusEnumeration" Fixed-at-Build
  b005f9f1f5 OvmfPkg/OvmfXen: remove IncompatiblePciDeviceSupport DXE driver
  8c8f886f27 OvmfPkg/Bhyve: remove IncompatiblePciDeviceSupport DXE driver
  984c93ece3 OvmfPkg/IncompatiblePciDeviceSupportDxe: remove PcdPciDisableBusEnumeration
  32fef03563 OvmfPkg/PciHostBridgeLib: consolidate #includes and INF file sections
  e120c962f5 OvmfPkg/PciHostBridgeLibScan: create from PciHostBridgeLib
  c2f24ba321 OvmfPkg/Bhyve: consume PciHostBridgeLibScan
  307763c3da OvmfPkg/OvmfXen: consume PciHostBridgeLibScan
  242678da2a OvmfPkg/PciHostBridgeLib: remove Bhyve and Xen support
  33d4f3e39e OvmfPkg/PciHostBridgeLibScan: remove QEMU (fw_cfg) support
  4c81178cf0 OvmfPkg/PciHostBridgeLibScan: remove PcdOvmfHostBridgePciDevId
  8af38170b5 OvmfPkg/PciHostBridgeLibScan: clean up file names and file-top comments
  7e25086a00 OvmfPkg/SmbiosPlatformDxe: clean up #includes and INF
  5072593738 OvmfPkg/SmbiosPlatformDxe: return EFI_NOT_FOUND if there is no SMBIOS data
  4db374562f OvmfPkg/SmbiosPlatformDxe: locate SMBIOS protocol in InstallAllStructures()
  a8ab14424e OvmfPkg/SmbiosPlatformDxe: split GetXenSmbiosTables() decl. to new header
  9d84e74ca0 OvmfPkg/SmbiosPlatformDxe: declare InstallAllStructures() in header file
  d4a8aaee73 OvmfPkg/SmbiosPlatformDxe: create Xen-specific module INF file
  ce270905bf OvmfPkg/SmbiosPlatformDxe: split Xen entry point from QEMU entry point
  51adb689e1 OvmfPkg: restrict XenPlatformLib to BdsDxe in the IA32, IA32X64, X64 DSCs
  ddb3fdbef3 BaseTools GenFw: Fix regression issue to convert the image to ACPI data
  558d83ab1a OvmfPkg/README: Fix typo in README
  beb443fde0 ShellPkg: Fix typo
  702ba436ed OvmfPkg/PlatformCI: bump QEMU choco package version to 2021.5.5
  83761337ec NetworkPkg/IScsiDxe: wrap IScsiCHAP source files to 80 characters
  29cab43bb7 NetworkPkg/IScsiDxe: simplify "ISCSI_CHAP_AUTH_DATA.InChallenge" size
  95616b8661 NetworkPkg/IScsiDxe: clean up "ISCSI_CHAP_AUTH_DATA.OutChallengeLength"
  e8f28b09e6 NetworkPkg/IScsiDxe: clean up library class dependencies
  cf01b2dc8f NetworkPkg/IScsiDxe: fix potential integer overflow in IScsiBinToHex()
  d90fff40cb NetworkPkg/IScsiDxe: assert that IScsiBinToHex() always succeeds
  dc469f1371 NetworkPkg/IScsiDxe: reformat IScsiHexToBin() leading comment block
  47b76780b4 NetworkPkg/IScsiDxe: fix IScsiHexToBin() hex parsing
  54e90edaed NetworkPkg/IScsiDxe: fix IScsiHexToBin() buffer overflow
  b8649cf2a3 NetworkPkg/IScsiDxe: check IScsiHexToBin() return values
  288bd74a22 Pytool: SpellCheck: Fix incorrect file mask across package matrices
  1ad794b627 MdeModulePkg: Fix device path when boot manager menu is from different FV
  11b1c1d4b9 SecurityPkg: TcgStorageOpalLib: Initialize SupportedAttributes parameter.
  d58016b768 UefiPayloadPkg: Get platform specific logic via protocol for BDS
  d8c18ba3f4 MdeModulePkg: Add Universal Payload general definition header file
  b597b6e24c MdeModulePkg: Add new structure for the PCI Root Bridge Info Hob
  99de2e7e03 UefiPayloadPkg: UefiPayload retrieve PCI root bridge from Guid Hob
  9d53e01efe MdeModulePkg: Add new structure for the Universal Payload SMBios Table Hob
  70e8c9c3bc MdeModulePkg/Universal/SmbiosDxe: Scan for existing tables
  302a8f353c UefiPayloadPkg: Create gUniversalPayloadSmbiosTableGuid Hob
  75293330ea MdeModulePkg: Add new structure for the Universal Payload ACPI Table Hob
  761329ee27 MdeModulePkg/ACPI: Install ACPI table from HOB.
  8c0d678063 UefiPayloadPkg: Create gUniversalPayloadAcpiTableGuid Hob
  fa24b6ed26 UefiPayloadPkg: Use DynamicEx instead of Dynamic to pass PCD across binary
  c511426abe MdeModulePkg/UniversalPayload: Add definition for extra info in payload
  fe471d4a57 UefiPayloadPkg: Add PayloadLoaderPeim which can load ELF payload
  ab2b389e7a PeiCore: Remove assertion when failing to load PE image
  1b380aa603 BaseTools GenFw: Keep read only alloc section as text when convert ELF
  9cf9de668f StandaloneMmPkg: Core: Spelling error in comment
  610385fa3b ArmPlatformPkg: SpellCheck: Switch spellcheck CI to AuditOnly
  04ddd1271e ArmPkg: SpellCheck: Update valid acronyms in ExtendedWords
  cdf7544703 MdeModulePkg PciBusDxe: Increase the width of data read during oprom shadow
  2847c72fda Maintainers.txt: Add Reviewers for Universal Payload definitions
  1162ae8297 Maintainers.txt: Add reviewers for ACPI and SMBIOS modules
  a63914d3f6 ArmPkg: Move cache defs used in Universal/Smbios into ArmCache.h
  6cfeeb71c4 UefiCpuPkg/CpuCommonFeaturesLib: Correct the CPU location check
  d9a7612f8d MdeModulePkg/BdsDxe: Update BdsEntry to use Variable Policy
  5959879e92 ArmVirtPkg: Add PCIe host bridge utility lib for ArmVirtPkg
  4dda0f7ab4 ArmVirtPkg: Enable PCIe support for Kvmtool
  1e5e58d39b UefiPayloadPkg/UefiPayloadEntry: Improve bootloader memrange parsing
  7471751a4d UefiPayloadPkg/UefiPayloadEntry: Remove 4GB memory WA
  20ca528828 CryptoPkg: BaseCryptLib: Update Salt length requirement for RSA-PSS scheme.
  18b2272e4d Azurepipeline: SpellCheck: Enforce Node dependency to use version 14.x
  eba32695ee CryptoPkg/BaseCryptLib: Enabled CryptSha512 for Smm/Runtime drivers
  12e34cd2f7 OvmfPkg/Bhyve: clean up TPM_ENABLE remnants
  82f727c4af UefiPayloadPkg: Add HobLib for UniversalPayload
  ea0bd5f6a7 MdeModulePkg: Add new structure for the Universal Payload Serial Port Info
  a75c029f60 UefiPayloadPkg: Add a separate PlatformHookLib for Universal Payload
  d63595c3c9 UefiPayloadPkg: Update the function definition of HobConstructor
  0ff6de9358 UefiPayloadPkg: Create separate Payload Entry for UniversalPayload
  b208d37c73 UefiPayloadPkg: Get and enter DxeCore for Universal Payload
  27cb64fffc UefiPayloadPkg: Fix up UPL Pcd database
  6b69f73b59 UefiPayloadPkg: Include UniversalPayLoad modules in UefiPayloadPkg.dsc
  86e6948cfb UefiPayloadPkg: Remove assert when reserve MMIO/IO resource for devices
  2db0ed93ff UefiPayloadPkg: Add macro to enable and disable some drivers
  3eb72b308a UefiPayloadPkg: Add PcdInstallAcpiSdtProtocol feature in UefiPayloadPkg
  caa139fe17 UefiPayloadPkg: Add PcdResetOnMemoryTypeInformationChange in UefiPayloadPkg
  8efd912baf UefiPayloadPkg: Add new structure for BootManagerMenuFile HOB
  19a541d70e UefiPayloadPkg: consume the BootManagerMenuFile HOB
  333a866106 BaseTools: Remove check for Split.exe in toolset.bat
  f0a3f6d9c3 BaseTools: Fix spelling of "overwrite" and "overwriting" in toolset.bat
  17143c4837 BaseTools: Reset ERRORLEVEL in toolsetup.bat after edk2basetools check
  abfff7c45d BaseTools GenFw: Add support for RISCV GOT/PLT relocations
  27b8a52957 MdePkg: MmConfiguration: Move definition of EFI_MM_RESERVED_MMRAM_REGION
  d1fc3d7ef3 MdePkg: MmConfiguration: Added definition of MM Configuration PPI
  5a2e030f73 OvmfPkg/GenericQemuLoadImageLib: plug cmdline blob leak on success
  932449710c OvmfPkg/X86QemuLoadImageLib: plug cmdline blob leak on success
  24b0e9d128 Revert "OvmfPkg/QemuKernelLoaderFsDxe: don't expose kernel command line"
  cf20302474 OvmfPkg/GenericQemuLoadImageLib: Read cmdline from QemuKernelLoaderFs
  9421f5ab8d OvmfPkg/X86QemuLoadImageLib: State fw_cfg dependency in file header
  b37cfdd280 OvmfPkg/XenPlatformPei: Relocate shared_info page mapping
  55dee4947b MdePkg : Add IPMI Macro and Structure Defintions to resolve build errors
  580b11201e IntelFsp2Pkg: Add Config Editor tool support
  939ed3a592 UefiPayloadPkg/PayloadLoader: Fix bug in locating relocation section
  3cde0d553d UefiPayloadPkg/PayloadLoader: Remove assertion
  49eeda113a NetworkPkg/IScsiDxe: re-set session-level authentication state before login
  7eba9f698e NetworkPkg/IScsiDxe: add horizontal whitespace to IScsiCHAP files
  7b6c2b2a26 NetworkPkg/IScsiDxe: distinguish "maximum" and "selected" CHAP digest sizes
  903ce1d8f8 NetworkPkg/IScsiDxe: support multiple hash algorithms for CHAP
  47fea2abcb NetworkPkg/IScsiDxe: support SHA256 in CHAP
  bb33c27fbe NetworkPkg: introduce the NETWORK_ISCSI_MD5_ENABLE feature test macro
  8697dc60cc Maintainers.txt: Update Maintainers and reviewers for UefiPayloadPkg
  fea7901dba UefiPayloadPkg: Fix the build failure
  1e0c441c92 OvmfPkg/Bhyve: add USB support
  44ced03798 OvmfPkg/Bhyve: use static PCI32Base address
  b3db0cb1f8 MdeModulePkg/PartitionDxe: Ignore PMBR BootIndicator per UEFI spec
  0a6b303dce UefiCpuPkg/ExceptionLib: Conditionally clear shadow stack token busy bit
  d10e058016 MdeModulePkg/RegularExpressionDxe: Fix memory assert in FreePool()
  4c051c2c65 MdeModulePkg: Update YAML file to fix CI error
  31fcee6d99 ArmVirtPkg: Add PlatformHasAcpiDtDxe for Cloud Hypervisor
  c28fc8ab3b ArmVirtPkg: Install Acpi tables for Cloud Hypervisor
  0e3b6bd0ee ArmVirtPkg: support Cloud Hypervisor in edk2
  b560e9d9b6 IntelFsp2Pkg: PatchFv parseInfFile function modification
  f47c4676dd Pytool: SpellCheck: Defer path expansion in cspell parameters
  cc89d245f9 Maintainers.txt: remove Laszlo Ersek's entries
  84af6ea320 BaseTools/Scripts: Ignore Mergify merge commits in PatchCheck.py
  b491eace37 .mergify: Simplify Mergify rules using GitHub status checks
  5ef08a49e3 .azurepipelines: Remove FINISHED and FAILED states
  ad1009ec62 MdePkg/Include: Add STATIC_ASSERT for L'' and L"" strings
  3de3c24755 BaseTools: Remove non-ascii character of StructurePcd comment
  40a9066439 BaseTools: Enable the flag to treat dynamic pcd as dynamicEx
  22fe311bd2 .pytool/EccCheck: Locate BaseTools dir with EDK_TOOLS_PATH
  a050c599df .pytool/EccCheck: Rename edk2_path as workspace_path
  50672d2692 .pytool/EccCheck: Check ecc_csv exists
  fb5b6220a9 .pytool/EccCheck: Set PACKAGES_PATH env var in Ecc
  fda5226aa3 UefiPayloadPkg: Dump hob information from boot loader
  7d748705b1 MdeModulePkg: Change the PldHeader to Header in ExtraData.h
  9bf4aee734 UefiPayloadPkg: Assign the length of UniversalPayload ExtraData
  d0b6596b8e MdeModulePkg/RamDiskDxe: Init list head before registering RamDisk protocol
  91f5d3b410 IntelFsp2Pkg: BaseCacheLib EfiProgramMtrr MtrrNumber Should be UINT32
  be282b1493 UefiPayloadPkg: Add PCD_DYNAMIC_AS_DYNAMICEX and set to True
  cac83b6f3b IntelFsp2Pkg: Add search function for Config Editor
  4bac086e8e UefiPayloadPkg: Add FV Guid for DXEFV and PLDFV
  fddb8d24ec ArmPlatformPkg/Scripts: Infer dll load address from console output
  885efcd3f9 MdePkg/Include: Smbios Specification 3.4.0 changes
  83b43c4cb1 MdeModulePkg PCD: Print which PCD was unable to be found
  c32c5911c4 BaseTools GenFw: Add support for R_RISCV_PCREL_LO12_S relocation
  097aeeb119 MdePkg/BaseLib: Add MemoryFence implementation for RiscV64
  391cffcb61 MdeModulePkg PiSmmCore: Change MemoryAttributes message to DEBUG_VERBOSE
  8781b143de BaseTools/Scripts: Fix GetMaintainer.py line endings
  28ef05ce10 BaseTools/Scripts: Allow GitHub ID at end Maintainers.txt lines
  2f5ad3f451 Maintainers.txt: Add GitHub IDs
  332632abf3 Maintainers.txt: Add Jiewen Yao as OvmfPkg Maintainer
  4d28a1c2fd BaseTools: Remove COMMON section from the GCC discard list
  878a92a887 CryptoPkg/OpensslLib: Add native instruction support for X64
  147f34b56c CryptoPkg/OpensslLib: Commit the auto-generated assembly files for X64
  ac70e71b1f NetworkPkg: Making the HTTP IO timeout value programmable with PCD
  ab796d3e2a NetworkPkg: Add HTTP Additional Event Notifications
  b461d67639 OvmfPkg/ResetVector: move SEV specific code in a separate file
  7f05102f65 OvmfPkg/ResetVector: add the macro to invoke MSR protocol based VMGEXIT
  dc485c556d OvmfPkg/ResetVector: add the macro to request guest termination
  f05eb2dfe5 OvmfPkg/AmdSev/SecretDxe: fix header comment to generic naming
  35e267cb34 OvmfPkg/AmdSev: use GenericQemuLoadImageLib in AmdSev builds
  a26a08dc1f OvmfPkg: PlatformBootManagerLibGrub: Allow executing kernel via fw_cfg
  0cb48007f7 OvmfPkg: add library class BlobVerifierLib with null implementation
  c73e31f54d OvmfPkg: add BlobVerifierLibNull to DSC
  6bf5580a3d ArmVirtPkg: add BlobVerifierLibNull to DSC
  d10ad8444f OvmfPkg/QemuKernelLoaderFsDxe: call VerifyBlob after fetch from fw_cfg
  5ace477f34 OvmfPkg/AmdSev/SecretPei: build hob for full page
  0deeab36d1 OvmfPkg/AmdSev: reserve MEMFD space for for firmware config hashes
  385b9d80a0 OvmfPkg/AmdSev: add BlobVerifierLibSevHashes
  514b3aa08e OvmfPkg/AmdSev: Enforce hash verification of kernel blobs
  8e6bb64fe4 EmbeddedPkg/VirtualRealTimeClockLib: Fix SetTime issues
  610bcc69ed ArmVirtPkg: Remove meaningless comment
  3445058aea MdeModulePkg/CapsuleApp: Fix typo in error message
  2e1fb41339 build: Fix python3.10 threading DeprecationWarnings
  0b1b0a9674 python: Replace distutils.utils.split_quotes with shlex.split
  fc50df0d8e BaseTools: Drop check for distutils.utils
  03e77558d4 BaseTools: use shutil.copyfile instead shutil.copy2
  2b47aaecef MdeModulePkg: Add BootDiscoveryPolicyUiLib.
  bb806a6e88 SecurityPkg: Create SecureBootVariableLib.
  9732659698 SecurityPkg: Create library for enrolling Secure Boot variables.
  12a4d0cb9d ArmVirtPkg: add SecureBootVariableLib class resolution
  3d427c5f83 OvmfPkg: add SecureBootVariableLib class resolution
  b926956418 EmulatorPkg: add SecureBootVariableLib class resolution
  db959018b6 SecurityPkg: Remove duplicated functions from SecureBootConfigDxe.
  a97e9e327e ArmPlatformPkg: Create include file for default key content.
  94e065582b SecurityPkg: Add SecureBootDefaultKeysDxe driver
  19107590b6 SecurityPkg: Add EnrollFromDefaultKeys application.
  45f3dd2ce9 SecurityPkg: Add new modules to Security package.
  55266a9b8a SecurityPkg: Add option to reset secure boot keys.
  6355287206 Maintainers.txt: Add new maintainer and reviewer to EmbeddedPkg/
  9abc60f9f7 EmbeddedPkg/libfdt: Add strcmp and strncpy to libfdt_env.h
  0856cdc89e MdePkg: add definition of LINUX_EFI_INITRD_MEDIA_GUID
  97fdcbda4e OvmfPkg: Remove Initrd LINUX_EFI_INITRD_MEDIA_GUID
  4de77ae989 UefiCpuPkg/CpuCacheInfoLib: Sort CpuCacheInfo array
  3c6107758b SecurityPkg: Fix GetSupportedAndActivePcrs counter calculation
  b40bdd6ecd UefiPayloadPkg: Add Fixed PCDs and use Macro to define the default value.
  d497eace3b UefiPayloadPkg: define some PCD as DynamicEX PCD
  ac6e5d6b41 UefiPayloadPkg: change the default value of some PCDs.
  672bd1c711 UefiPayloadPkg: Add a macro to enable or diable the serial driver.
  d02dbb53cd UefiPayloadPkg: Fix the non-ascii character in UniversalPayloadEntry.c
  a7ddc7847c RedfishPkg/JsonLib: Add more JsonLib functions
  5963ce5d28 MdePkg: Add ACPI 6.4 header file
  4d7137f261 MdePkg: Increment FADT version
  d910e83299 MdePkg: Rename SBSA Generic Watchdog to Arm Generic Watchdog
  ad3dea9861 MdePkg: Update PMTT to ACPI 6.4
  ced4cb7609 MdePkg: Add SPA Location Cookie field to SPA Range structure
  c82d6dd4a3 MdePkg: Remove DPPT table
  357383bc4f MdePkg: Add flags and MinTransferSize to Generic Initiator
  7b17bcd9a0 MdePkg: Add 'Type 5' PCC structure
  0938f9235c MdePkg: Add Multiprocessor Wakeup structure
  75c4a8e10d MdePkg: Add the Platform Health Assessment Table (PHAT)
  1803757a9b MdePkg: Add Secure Access Components in the SDEV table
  605c4a1ff2 MdePkg: Add Cache ID to PPTT
  3d359ff905 MdePkg: Fix broken coding style in Acpi64.h
  7311e96417 RedfishPkg/RefishCrtLib: Public RefishCrtLib
  03e19e6bc8 ArmPkg/IndustryStandard: 32b/64b agnostic FF-A, Mm SVC and Std SMC IDs
  aee0098faf ArmPkg: prepare 32bit ARM build of StandaloneMmPkg
  ca1773878d GenFv: Arm: support images entered in Thumb mode
  b7f0226a46 StandaloneMmPkg: fix pointer/int casts against 32bit architectures
  a776bbabd9 StandaloneMmPkg: build for 32bit arm machines
  ac826886c9 MdeModulePkg/UefiSortLib:Add UefiSortLib unit test
  6fdd1c13a7 MdeModulePkg PCD: Reinstall PCD service PPIS when memory available
  ef56f55d19 EmbeddedPkg/NonCoherentDmaLib: Avoid dereferencing unset Map field
  8dd4fc5be6 UefiCpuPkg/CpuCacheInfoLib: Correct logical for identifying cache type
  7b4a99be8a CryptoPkg: BaseCryptLib fix incorrect param order
  - Removed patches which are merged to mainline:
  ovmf-bsc1186151-fix-iscsi-overflows.patch
  ovmf-xen-relocate-shared_info_page-map.patch
  - Updated patches
  ovmf-fix-xen-s3-detection.patch -&gt; ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
  ovmf-xen-add-qemu-kernel-loader-fs.patch -&gt; ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch
  - Added patches
  ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch</changelog>
  <changelog author="jlee@suse.com" date="1634904000">- Removed edk2-stable202105.tar.gz because we updated to edk2-stable202108</changelog>
  <changelog author="jlee@suse.com" date="1635249600">- Removed patches which are merged to mainline:
    ovmf-bsc1186151-fix-iscsi-overflows.patch
    ovmf-xen-relocate-shared_info_page-map.patch
- Removed patches because replaced:
    ovmf-fix-xen-s3-detection.patch -&gt; ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
    ovmf-xen-add-qemu-kernel-loader-fs.patch -&gt; ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1636372800">- Update rpmlintrc (fixes aarch64 build)</changelog>
  <changelog author="jlee@suse.com" date="1638532800">- Merge the difference from SLE for pushing back to SLE15-SP4
  - Add/Update 50-xen-hvm-x86_64.json in descriptors.tar.xz
  - Add the json descriptor for xen-hvm (bsc#1180050)
  - Add "nvram-template" and change the firmware file to
  ovmf-x86_64-ms-4m.bin (bsc#1180050, bsc#1181264)
  - The following patches in SLE are already in edk2-edk2-stable202108
    in factory, so they will be removed from 15-SP4
  - ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
    the potential NULL dereference in AuthenticodeVerify()
    (bsc#1177789, CVE-2019-14584)
  - 26442d11e620a9	edk2-stable202011~124
  - ovmf-bsc1180079-amd-sev-es-mitigation.patch to mitigate the
  potential AMD SEV-ES security issues
  (bsc#1180079)
  - a91b700e385e74	edk2-stable202102~181
  - ovmf-jscSLE-16075-SEV-ES-use-physical-address.patch as the
  follow-up patch for SEV-ES to fix the flash writing
  (jsc#SLE-16075)
  - 3a3501862f7309	edk2-stable202102~105
  - ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption
  (bsc#1183578, CVE-2021-28211)
  - e7bd0dd26db7e5	edk2-stable202011~7
  - ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion
  (bsc#1183579, CVE-2021-28210)
  - b9bdfc72853fe9	edk2-stable202011~9
  - Add ovmf-bsc1186151-fix-iscsi-overflows.patch to fix the possible
  overflows in IScsiDxe
  (bsc#1186151)
  - 83761337ec91fb	edk2-stable202108-rc0~171</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1638792000">- cross-i386-binutils and cross-i386-gcc have been dropped from
  Factory, so use only cross-x86_64-* - boo#1193424</changelog>
  <changelog author="jlee@suse.com" date="1638964800">- For preparing push to SLE15-SP4, add more notes:
  - Drop upstreamed ovmf-jscSLE-16075-SEV-ES-fixes.patch from 15-SP4
  - All patches in the above big patch are in edk2-stable202011
  - Some changes in ovmf.spec file of 15-SP4:
  - brotli-v1.0.7-17-g666c328-c.tar.xz and "add brotli" section
  be removed because ovmf-disable-brotli.patch.
  - Using %{_prefix} instead of /usr hard code.
  - Redundant %defattr(-,root,root) are removed.
  - BuildRoot be removed because factory doesn't have it.
  - Sync some differences in the change log between 15-SP3 with openSUSE
    TW since "Wed Jan 24 06:31:21 UTC 2018":
  - Add TLS and IPv6 supports for ArmVirtQemu.
  - ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  - already in edk2-stable202008
  - Drop the build requirement of python2</changelog>
  <changelog author="jlee@suse.com" date="1640088000">- Update to edk2-stable202111
  - Features (https://github.com/tianocore/edk2/releases):
  Add SSDT CPU topology generator
  Support ACPI 6.4 in GTDT parser and generator
  Support ACPI 6.4 in DynamicTables FADT parser
  Support ACPI 6.4 in Acpiview PCCT parser
  Support ACPI 6.4 in Acpiview HMAT parser
  Add support for the microvm machine type (qemu)
  OVMF/ArmVirt: add support for virtio-mmio 1.0
  IntelFsp2Pkg: adopt FSP 2.3 specification
  UefiCpuPkg VTF0 X64: Build page tables using Linear-Address Translation to a 1-GByte Page
  Enable wildcard host name matching in HTTPS/TLS implementation
  Add QuickSort function into BaseLib
  Add SMM NV variable support in universal UEFI payload
  Add TDVF to OvmfPkg
  Make package and platform builds reproducible across source format changes
  - Patches (git log --oneline --reverse edk2-stable202108~..edk2-stable202111):
  7b4a99be8a CryptoPkg: BaseCryptLib fix incorrect param order
  82f7e315d6 MdeModulePkg/PeiCore: Remove MigrateSecModulesInFv()
  8b15024dc7 Maintainers: Add kraxel as Reviewer to ArmVirtPkg and OvmfPkg
  80e67af9af OvmfPkg: introduce a common work area
  ab77b6031b OvmfPkg/ResetVector: update SEV support to use new work area format
  b9af5037b2 OvmfPkg/ResetVector: move the GHCB page setup in AmdSev.asm
  a82bad9730 ArmPkg/GicV3Dxe: Don't signal EOI on arbitrary interrupts
  94e465e5cb OvmfPkg/Virtio10: Add virtio-mmio 1.0 defines
  08293e43da OvmfPkg/VirtioMmioDeviceLib: Add virtio 1.0 detection.
  212a2b9bb8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Fix SetPageSize.
  537a724421 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Fix SetQueueAddress
  6a3e9576b8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Add default QueueNum
  ae12188cf8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Adapt feature bit handling
  77d5fa8024 OvmfPkg/VirtioMmioDeviceLib: enable virtio 1.0
  b04453d36b MdeModulePkg/EbcDxe: Mitigate memcpy intrinsics
  dc995ce906 MdeModulePkg: Add BootDiscoveryPolicyOld variable.
  443300be46 MdePkg:Update IndustryStandard/Nvme.h with Nvme amdin controller data
  0f11537548 MdeModulePkg:Increase Nvme capacity display
  cae735f613 ArmPkg: Enable boot discovery policy for ARM package.
  cb0d24637d OvmfPkg/OvmfXen: set PcdAcpiS3Enable at initialization
  28152333bc OvmfPkg/LockBoxLib: use PcdAcpiS3Enable to detect S3 support
  52e2dabc0f OvmfPkg/PlatformBootManagerLib: use PcdAcpiS3Enable to detect S3 support
  5b5f10d746 OvmfPkg/SmmControl2Dxe: use PcdAcpiS3Enable to detect S3 support
  9f3eda177a OvmfPkg/OvmfXen: add QemuKernelLoaderFsDxe
  f0fe55bca4 UefiPayloadPkg: Fix the build error when enable Core ci for UefiPayloadPkg
  5d34cc49d5 UefiCpuPkg/PiSmmCpuDxeSmm: Update mPatchCetSupported set condition
  cdda3f74a1 UefiPayloadPkg/UefiPayloadEntry: Fix memory corruption
  3b3f882288 MdeModulePkg/PiSmmCore: Drop deprecated image profiling commands
  b170806518 UefiCpuPkg: Clean up save state boundary checks and comments.
  12e33dca4c IntelFsp2Pkg: Support Config File and Binary delta comparison
  63fddc98e0 UefiPayloadPkg: Create .yaml file in UefiPayloadPkg
  e3ee8c8dbd .azurepipelines: Add UefiPayloadPkg in gate-build-job.yml and CISetting.py
  b6bc203375 MdeModulePkg/HiiDatabaseDxe:remove dead code block
  c5e805ffe1 MdeModulePkg: Fix typo of "memory" in RamDiskDxe debug message
  81d71fb86e Maintainers.txt: Update maintainer/reviewer roles in MdeModulePkg
  edf8bc6d24 SecurityPkg/MemoryOverwriteControl: Add missing argument to DEBUG print
  4473834e7d OvmfPkg/OvmfXen: Fix build with QemuKernelLoaderFsDxe
  a7cf2c5664 RedfishPkg: Fix various typos
  851785ea67 UefiPayloadPkg: Include more modules in UefiPayloadPkg.
  d248516b3a UefiPayloadPkg: Include Network modules in UefiPayloadPkg.
  6c7d6d4a5e UefiCpuPkg: ResetVector Tool Support for Python 3
  cf7c650592 UefiCpuPkg: ResetVector Tool additional debug prints
  d96df7e993 UefiPayloadPkg: Fix the bug in dump guid HOB info functions
  dcd3d63f4f UefiPayloadPkg: Dump hob info from gEdkiiBootManagerMenuFileGuid
  610d8073f2 SecurityPkg/TPM: Import PeiDxeTpmPlatformHierarchyLib.c from edk2-platforms
  4d5f39cd22 SecurityPkg/TPM: Fix bugs in imported PeiDxeTpmPlatformHierarchyLib
  ebbc8ab2cd SecrutiyPkg/Tcg: Import Tcg2PlatformDxe from edk2-platforms
  2906e572c6 SecurityPkg/Tcg: Make Tcg2PlatformDxe buildable and fix style issues
  f108178c56 SecurityPkg: Introduce new PCD PcdRandomizePlatformHierarchy
  a4867dea2a SecurityPkg/Tcg: Import Tcg2PlatformPei from edk2-platforms
  2fa89c8e11 SecurityPkg/Tcg: Make Tcg2PlatformPei buildable and fix style issues
  3b69fcf5f8 SecurityPkg: Add references to header and inf files to SecurityPkg
  6c80564b89 MdeModulePkg/Core/Pei: Fix typo in function descriptions
  6f501a7c9b MdeModulePkg/Core/Pei: Make migrated PEIM message verbose
  c19d18136e MdeModulePkg/Core/Pei: Fix pointer size mismatch in EvacuateTempRam()
  f4e72cf9d6 UefiPayloadPkg: Add script to build UniversalPayload in UefiPayloadPkg
  bda3546c55 UefiPayloadPkg: Fix the warning when building UefiPayloadPkg with IA32+X64
  010753b7e7 UefiCpuPkg: Refactor initialization of CPU features during S3 resume
  89f7ed8b29 UefiCpuPkg: Prevent from re-initializing CPU features during S3 resume
  60d8bb9f28 UefiCpuPkg: VTF0 Linear-Address Translation to a 1-GByte Page till 512GB
  ac6388add4 ArmPkg/ProcessorSubClassDxe: Fix the format of ProcessorId
  e3e47d7963 UefiCpuPkg: SecCoreNative without ResetVector
  542cba73d2 SecurityPkg: Add debug log for indicating IBB verified OBB successfully
  f334c5a41d IntelFsp2WrapperPkg: Make PcdFspModeSelection dynamic
  79019c7a42 OvmfPkg: set a default value for the WorkAreaHeader PCD
  fdeff3fdae EmbeddedPkg: Remove duplicate libfdt.h include
  f2a7e24e38 EmbeddedPkg: AndroidBootImgBoot error handling updates
  c0cd26f43c EmbeddedPkg: Install FDT if UpdateDtb is not present
  7ea7f9c077 EmbeddedPkg: Add LoadFile2 for linux initrd
  d60915b751 UefiPayloadPkg: Add Macro to enable or disable some drivers.
  46b4606ba2 MdeModulePkg/PciBusDxe: Improve the flow of testing support attributes
  f57040b038 MdeModulePkg/BootManagerMenuApp: Limit string drawing within one line
  b0f1b1c5fd MdePkg: Fix DEVICE_SECURITY_EVENT_DATA_HEADER version definition
  cc5a67269e UefiPayloadPkg: Build a HOB from bootloader ACPI table
  dc430ccf3f UefiPayloadPkg: Use dummy constructor for PlatformHookLib
  4a1899dd79 UefiPayloadPkg: Add ".upld_info" in universal payload
  2ea0a0a414 BaseTools: Switch to downloading the ARM compiler from Arm's site
  1ce6ceb75b BaseTools: Switch to downloading the AARCH64 compiler from Arm's site
  c214128a38 BaseTools/GenMake: Use ToolDefinition as fallback option
  259c184c8f BaseTools/build: Set MakefileName
  445c39f757 BaseTools: Remove Makefile/MakefileName fields
  c7d5b046d9 BaseTools: Remove hard-coded strings for target and tools_def
  442e46d3b6 UefiPayloadPkg: Update maximum logic processor to 256
  499c4608b1 OvmfPkg/TPM PPI: Connect default consoles for user interaction
  b8675deaa8 OvmfPkg: Handle TPM 2 physical presence opcodes much earlier
  8ab8fbc016 OvmfPkg: Reference new Tcg2PlatformDxe in the build system for compilation
  bd298d7593 OvmfPkg: Reference new Tcg2PlatformPei in the build system
  f86de75862 MdePkg: MmCommunication: Added definition of MM Communication PPI
  8b4bb94f64 MdePkg: CI YAML: Added new GUID to ignore duplicate list
  9e950cda6a MdeModulePkg: CI YAML: Added new GUID to ignore duplicate list
  2273799677 SecurityPkg: Fix SecureBootDefaultKeysDxe failed to start
  422e5d2f7f UefiPayloadPkg: Remove asm code and sharing libraries
  0875443f7e DynamicTablesPkg: Extract AcpiHelperLib from TableHelperLib
  20775950c6 DynamicTablesPkg: Update TableHelperLib.inf
  1ad5182500 DynamicTablesPkg: Rename single char input parameter
  653113412f DynamicTablesPkg: Add HexFromAscii() to AcpiHelperLib
  72ab552554 DynamicTablesPkg: Add AmlGetEisaIdFromString() to AcpiHelperLib
  96e006b37e DynamicTablesPkg: Add Configuration Manager Object parser
  235ff9fcd1 DynamicTablesPkg: Use %a formatter in AmlDbgPrint
  7a8c037e9e DynamicTablesPkg: Update DynamicTablesPkg.ci.yaml
  691c5f7762 DynamicTablesPkg: Deprecate Crs specific methods in AmlLib
  22873f58c4 DynamicTablesPkg: Rework AmlResourceDataCodegen.c/h
  4cc1458dbe IntelFsp2Pkg: Adopt FSP 2.3 specification.
  c49cb8f30e ArmPkg: SmbiosMiscDxe: Don't populate ExtendedBiosSize when size &lt; 16MB
  282122ec5f ArmVirtPkg/TPM: Add a NULL implementation of TpmPlatformHierarchyLib
  b3685956d2 ArmVirtPkg: Reference new TPM classes in the build system for compilation
  c806b76865 ArmVirtPkg: Disable the TPM2 platform hierarchy
  606340fba3 OvmfPkg/Microvm: copy OvmfPkgX64 files as-is
  4932f05a00 OvmfPkg/Microvm: rename output files, fix includes
  2a49c19b9e OvmfPkg/Microvm: no smm
  60d55c4156 OvmfPkg/Microvm: no secure boot
  0569c52b15 OvmfPkg/Microvm: no tpm
  06fa1f1931 OvmfPkg/Microvm: no sev
  6073bf6cd8 OvmfPkg/Microvm: no csm
  b9dd64b80e OvmfPkg/Microvm: no emulated scsi
  27de86ae41 OvmfPkg/Microvm: use MdePkg/Library/SecPeiDxeTimerLibCpu
  76602f45dc OvmfPkg/Microvm: use XenTimerDxe (lapic timer)
  6a8e9ad24b OvmfPkg/Microvm: PlatformPei/MemDetect tweaks
  8583b57c5c OvmfPkg/Microvm: PlatformPei/Platform memory map tweaks
  bf02d73e74 OvmfPkg/Microvm: PlatformPei/Platform: add id.
  1d3e89f349 OvmfPkg/ResetSystemLib: add driver for microvm
  2c467c9be2 OvmfPkg/Microvm: BdsPlatform: PciAcpiInitialization tweak.
  8456785986 OvmfPkg/Microvm: use PciHostBridgeLibNull
  55f47d2299 OvmfPkg/Microvm: wire up serial console, drop super-io
  862e814de4 OvmfPkg/Microvm: add Maintainers.txt entry
  06a326caf1 DynamicTablesPkg: Update FADT generator to ACPI 6.4
  f09dbf20b9 DynamicTablesPkg: Rename SBSA generic watchdog
  942c9bd357 ShellPkg: Update Acpiview GTDT parser to ACPI 6.4
  80e67bcb23 ShellPkg: Update Acpiview PCCT parser to ACPI 6.4
  b4da6c29f1 ShellPkg: Add Type 5 PCC Subspace Structure parser
  5ece2ad36c MdeModulePkg/Core/Dxe: Add lock protection in CoreLocateHandleBuffer()
  30400318a2 ShellPkg: Update Acpiview HMAT parser to ACPI spec version 6.4
  71c3c9c0c4 DynamicTablesPkg: Remove unnecessary includes
  25cf58a163 DynamicTablesPkg: Add missing parameter check
  bfaf7c8b9e DynamicTablesPkg: Add AddSsdtAcpiHeader()
  28b2df475f DynamicTablesPkg: Add AmlRdSetEndTagChecksum()
  74addfeab6 DynamicTablesPkg: Add AmlSetRdListCheckSum()
  7b2022d39e DynamicTablesPkg: Set EndTag's Checksum if RdList is modified
  2dd7dd3952 DynamicTablesPkg: Clear pointer in node creation fcts
  37bd08176c DynamicTablesPkg: Update error handling for node creation
  6d2777d85f DynamicTablesPkg: Make AmlNodeGetIntegerValue public
  f995f8672b DynamicTablesPkg: AML Code generation for Register()
  9454d1ebcb DynamicTablesPkg: AML Code generation for Resource data EndTag
  1e33479b39 DynamicTablesPkg: AML code generation for a Package
  12e65fd258 DynamicTablesPkg: Helper function to compute package length
  ce15936f2f DynamicTablesPkg: AML code generation for a ResourceTemplate
  de62ccbf4f DynamicTablesPkg: AML code generation for a Method
  e2d7b4950b DynamicTablesPkg: AML code generation to Return a NameString
  3e958e93ce DynamicTablesPkg: AML code generation for a Method returning a NS
  018a962d92 DynamicTablesPkg: AML code generation for a _LPI object
  a5e36ad9bc DynamicTablesPkg: AML code generation to add an _LPI state
  f17ef10e63 DynamicTablesPkg: Add CM_ARM_LPI_INFO object
  769e63999f DynamicTablesPkg: SSDT CPU topology and LPI state generator
  19ee56c4b3 UefiPayloadPkg: Add a macro to select the SecurityStubDxe driver.
  782d018703 MdePkg: Add ProcessorUpgradeSocketLGA4677 from SMBIOS 3.5.0
  ba4ae92234 ShellPkg: Support ProcessorUpgradeSocketLGA4677 from SMBIOS 3.5.0
  f22feb0e3b CryptoPkg/BaseCryptLib: Eliminate extra buffer copy in Pkcs7Verify()
  4225a464c6 MdePkg/BaseLib: Add QuickSort function on BaseLib
  6ed6abd6c1 BaseTools: Change RealPath to AbsPath
  978d428ec3 UefiPayloadPkg: Add PCI root bridge info hob support for SBL
  43b3840873 MdeModulePkg/Sd: Corrections for Extra.uni files
  a7fcab7aa3 MdeModulePkg/Core/Dxe: Acquire a lock when iterating gHandleList
  e40fefafa9 ArmVirtPkg/FdtClintDxe: Move FdtClientDxe to EmbeddedPkg
  fb759b8b73 MdePkg: Add PcdPciIoTranslation PCD
  7d78a86ecf ArmPkg: Use PcdPciIoTranslation PCD from MdePkg
  77e9b3a7c6 ArmVirtPkg/FdtPciPcdProducerLib: Relocate PciPcdProducerLib to OvmfPkg
  d881c6ddf5 ArmVirtPkg/HighMemDxe: Relocate HighMemDxe to OvmfPkg
  47bd85e9f9 OvmfPkg/HighMemDxe: Add RISC-V in the supported arch.
  f8d0501ded ArmVirtPkg/QemuFwCfgLib: Relocate QemuFwCfgLib to OvmfPkg
  26aa241d2f OvmfPkg/QemuFwCfgLibMmio: Add RISC-V arch support
  c6770f4b88 MdePkg: Add PcdPciMmio32(64)Translation PCDs
  9a7509e465 ArmVirtPkg/FdtPciHostBridgeLib: Relocate FdtPciHostBridgeLib to OvmfPkg/Fdt
  b21c6794de OvmfPkg/FdtPciHostBridgeLib: Add RISC-V in the supported arch.
  e0c23cba5e ArmVirtPkg/VirtioFdtDxe: Relocate VirtioFdtDxe to OvmfPkg/Fdt
  f2400e06db BaseTools: add edk2-test repo to SetupGit.py
  785cfd3305 UefiPayloadPkg: Use SECURITY_STUB_ENABLE to control the SecurityStubDxe
  7e43d3e086 ArmPkg/Smbios: Fix max cache size 2 wrong issue
  f10a112f08 UefiPayloadPkg: Fix the build issue for coreboot
  2108698346 StandaloneMmPkg: Support CLANGPDB builds
  11a4af85a4 Ovmfpkg: update Ia32 build to use new work area
  36b561623a OvmfPkg/AmdSev: update the fdf to use new workarea PCD
  91a978ce7e UefiPayloadPkg: Replace MEMROY_ENTRY by MEMORY_ENTRY
  6ef5797447 UefiPayloadPkg: Fix ECC reported issues
  90246a6d9f UefiPayloadPkg: Fix the build failure for non-universal payload
  37a33f02aa UefiCpuPkg: Cpu feature data stored in memory may be migrated
  4fdf843c75 DynamicTablesPkg: Fix unitialized variable use
  6893865b30 DynamicTablesPkg: Fix void pointer arithmetic
  99325a8b65 MdeModulePkg/SortLib: Add QuickSort function on BaseLib
  305fd6bee0 UefiCpuPkg/CpuCacheInfoLib: Add QuickSort function on BaseLib
  2f286930a8 ShellPkg: Parse I/O APIC and x2APIC structure
  bd5ec03d87 NetworkPkg/HttpBootDxe: make file extension check case-insensitive
  6254037223 ArmPkg: Implement PlatformBootManagerLib for LinuxBoot
  f079e9b450 OvmfPkg: Copy Main.asm from UefiCpuPkg to OvmfPkg's ResetVector
  5a2411784b OvmfPkg: Clear WORK_AREA_GUEST_TYPE in Main.asm
  c9ec74a198 OvmfPkg: Add IntelTdxMetadata.asm
  8b76f23534 OvmfPkg: Enable TDX in ResetVector
  87a34ca0cf UefiPayloadPkg: Add a common SmmAccessDxe module
  e7e8ea27d4 UefiPayloadPkg: Add a common SMM control Runtime DXE module
  bed990aae6 UefiPayloadPkg: Add bootloader SMM support module
  1d66480aa4 UefiPayloadPkg: Add SpiFlashLib
  04714cef46 UefiPayloadPkg: Add FlashDeviceLib
  ae8acce8ae UefiPayloadPkg: Add a common FVB SMM module
  242dcfe30f UefiPayloadPkg: Add a SMM dispatch module
  b80c17b62d UefiPayloadPkg: Add SMM support and SMM variable support
  2f6f3329ad FmpDevicePkg/FmpDxe: Use new Variable Lock interface
  9a95d11023 IntelFsp2Pkg/SplitFspBin.py: adopt FSP 2.3 specification.
  bb146ce32d MdePkg Cpuid.h: Define CPUID.(EAX=7,ECX=0):EDX[30]
  1bc232aae3 RedfishPkg: Update link to staging/RedfishClientPkg in Readme.md
  e7663fdd82 UefiPayloadPkg: Remove SystemTableInfo GUID.
  91b772ab62 RedfishPkg: Add more information to Readme.md
  c8594a5311 SecurityPkg/FvReportPei: Remove the ASSERT to allow neither M nor V
  939c2355da IntelFsp2Pkg SplitFspBin.py: Correct file name in file header
  6f9e83f757 NetworkPkg/HttpDxe: Enable wildcard host name matching for HTTP+TLS.
  b258f12889 BaseTools/VrfCompile: Fix uninitialized field from unnamed field
  0f4cdad25b DynamicTablesPkg: Add missing BaseStackCheckLib instance
  e13e53cb2f NetworkPkg/NetworkPkg.dsc: Add RngLib mapping for ARM and RISCV64
  c1f2287635 SecurityPkg/SecurityPkg.dsc: Add missing RngLib for ARM and RISCV64
  b0a03ca4a9 SignedCapsulePkg/SignedCapsulePkg.dsc: Add RngLib mapping
  15e635d1b5 UefiCpuPkg/MtrrLib/UnitTest: Fix 32-bit GCC build issues
  4050c873b5 MdeModulePkg/Variable/RuntimeDxeUnitTest: Fix 32-bit GCC builds
  d79df34beb BaseTools: Fix StructurePcd offset error.
  b5d4a35d90 MdeModulePkg/XhciSched: Fix missing DEBUG arguments
  48452993ad MdePkg/Include: Enhance DebugLib to support reproduce builds
  5948ec3647 MdePkg: Reproduce builds across source format changes
  f331310a10 ArmPkg: Reproduce builds across source format changes
  77dcd03ecf MdeModulePkg: Reproduce builds across source format changes
  45137bca2f NetworkPkg: Reproduce builds across source format changes
  d939a25d41 SecurityPkg: Reproduce builds across source format changes
  fd42dcb1fc OvmfPkg: Reproduce builds across source format changes
  8c1b1fe634 ShellPkg: Add comment that ItemPtr is set after validation
  d6e6337cd6 MdePkg: Fix ACPI memory aggregator/device type mismatch
  c974257821 MdeModulePkg AtaAtapiPassThru: Always do S.M.A.R.T. check if device support
  aab6bb3d32 MdeModulePkg/DxeCapsuleLibFmp: Capsule on Disk file name capsule
  a7b35aae13 MdeModulePkg\UfsBlockIoPei: UFS MMIO address size support both 32/64 bits
  f826b20811 UefiCpuPkg/UefiCpuLib: Add GetCpuFamilyModel and GetCpuSteppingId
  8c8867c5da MdeModulePkg/DxeCapsuleLibFmp: Use new Variable Lock interface
  22c3b5a865 BaseTools: Add authenticated variable store support
  a92559671a OvmfPkg/Xen: Fix VS2019 build issues
  4c495e5e3d OvmfPkg/Bhyve/PlatformPei: Fix VS2019 X64 NOOPT build issue
  466ebdd2e0 MdeModulePkg/FPDT: Lock boot performance table address variable at EndOfDxe
  455b0347a7 UefiCpuPkg/PiSmmCpuDxeSmm: Use SMM Interrupt Shadow Stack
  e1e7306b54 OvmfPkg/Library/ResetSystemLib: Fix Microvm VS2019 NOOPT build issue
  4c7ce0d285 MdeModulePkg AtaAtapiPassThru: Skip the potential NULL pointer access
  bb1bba3d77 NetworkPkg: Fix invalid pointer for DNS response token on error
  - Removed patches which are merged to mainline:
  - ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch to fix the
    S3 detection in ovmf-xen
  - cb0d24637d    edk2-stable202111-rc1~220
  - ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch to add QemuKernelLoaderFsDxe
    to ovmf-xen to load kernel from qemu fw_cfg
  - 9f3eda177a    edk2-stable202111-rc1~216
  - ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch
  - 4473834e7d    edk2-stable202111-rc1~203
  - The edk2-stable202111 includes the following patches for bsc#1192126
    to fix unlimited reset. (bsc#1192126)
    80e67af9af OvmfPkg: introduce a common work area
    ab77b6031b OvmfPkg/ResetVector: update SEV support to use new work area format
    b9af5037b2 OvmfPkg/ResetVector: move the GHCB page setup in AmdSev.asm</changelog>
  <changelog author="jlee@suse.com" date="1640260800">- Removed useless patch files because they are merged to edk2-stable202111
  - ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch
  - ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch
  - ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
- Updated URL to the edk2 repo on github
- Use downloaded edk2-edk2-stable%{version}.tar.gz instead of the URL
  for Source0 because the edk2-edk2-stable202111 tarball is broken
  in tianocore repo which can not pass the "osc service runall download_files"
  testing.
  - We ill change it back to the following setting when upstream fixed tarball:
  Source0:        https://github.com/tianocore/edk2/releases/download/edk2-stable%{version}/edk2-edk2-stable%{version}.tar.gz</changelog>
  <changelog author="jlee@suse.com" date="1641211200">- Modified gdb_uefi.py.in for python3 (bsc#1192126)
  - change 'long' to 'int'
  - using
    print ('
    instead of
    print "</changelog>
  <changelog author="bwiedemann@suse.com" date="1645099200">- Sort file lists for reproducible build results</changelog>
  <changelog author="jlee@suse.com" date="1646913600">- Update to edk2-stable202202
  - Features (https://github.com/tianocore/edk2/releases):
  OvmfPkg Add new target for Cloud Hypervisor
  Add TDVF to OvmfPkg
  Add new APIs to UefiCpuPkg/UefiCpuLib
  Add AMD Secure Nested Paging Support
  Add SSDT PCI generator in DynamicTablesPkg
  Support ACPI 6.4 PPTT changes
  Add FdtHwInfoParser library
  Add DynamicPlatRepo library
  Make package and platform builds reproducible across source format changes
  Add Uncrustify CI Plugin
  Apply uncrustify changes to all package C and H files
  - Patches (git log --oneline --reverse edk2-stable202111~..edk2-stable202202):
  bb1bba3d77 NetworkPkg: Fix invalid pointer for DNS response token on error
  ef9a059cdb EmulatorPkg/Win/Host: Update CC_FLAGS
  69877614fd .pytool/Plugin/EccCheck: Remove RevertCode()
  854462bd34 .pytool/Plugin/EccCheck: Remove temp directory on exception
  3019f1bbab .pytool/Plugin/EccCheck: Add performance optimizations
  99f84ff473 .pytools/Plugin/LicenseCheck: Use temp directory for git diff output
  76a1ce4d5f .azurepipelines/templates: Update max pipeline job time to 2 hours
  365dced2c3 ArmPkg: Update YAML to ignore specific ECC files/errors
  1939fc9569 ArmPlatformPkg: Update YAML to ignore specific ECC files/errors
  c97fee87f0 ArmVirtPkg: Update YAML to ignore specific ECC files/errors
  d5744ecba8 CryptoPkg: Update YAML to ignore specific ECC files/errors
  d7d30e8f21 EmulatorPkg: Update YAML to ignore specific ECC files/errors
  9deb937076 MdeModulePkg: Update YAML to ignore specific ECC files/errors
  df790cd6b3 MdePkg: Update YAML to ignore specific ECC files/errors
  60fa40be45 SecurityPkg: Update YAML to ignore specific ECC files/errors
  9944508e85 ShellPkg: Update YAML to ignore specific ECC files/errors
  c30c40d6c6 StandaloneMmPkg: Update YAML to ignore specific ECC files/errors
  c057347977 UefiPayloadPkg: Update YAML to ignore specific ECC files/errors
  f0f3f5aae7 UnitTestFrameworkPkg: Update YAML to ignore specific ECC files/errors
  dfafa8e453 MdeModulePkg/DxeCorePerformanceLib:Variable Initial
  a4a582e180 ArmPkg: Change use of EFI_D_* to DEBUG_*
  1d2482e1e3 ArmPlatformPkg: Change use of EFI_D_* to DEBUG_*
  c5b3a56e4f ArmVirtPkg: Change use of EFI_D_* to DEBUG_*
  a1878955b2 EmbeddedPkg: Change use of EFI_D_* to DEBUG_*
  9c7da8d804 EmulatorPkg: Change use of EFI_D_* to DEBUG_*
  917e98f3e5 FatPkg: Change use of EFI_D_* to DEBUG_*
  87000d7708 MdeModulePkg: Change use of EFI_D_* to DEBUG_*
  5f289f3ae3 MdePkg: Change use of EFI_D_* to DEBUG_*
  c49ca4a29e NetworkPkg: Change use of EFI_D_* to DEBUG_*
  47719926e8 OvmfPkg: Change use of EFI_D_* to DEBUG_*
  ca56749b0e PcAtChipsetPkg: Change use of EFI_D_* to DEBUG_*
  e905fbb05a SecurityPkg: Change use of EFI_D_* to DEBUG_*
  4a1aee13d8 ShellPkg: Change use of EFI_D_* to DEBUG_*
  586fda4800 SourceLevelDebugPkg: Change use of EFI_D_* to DEBUG_*
  96e1cba5c1 UefiCpuPkg: Change use of EFI_D_* to DEBUG_*
  1871d28eaf ArmPkg: Change OPTIONAL keyword usage style
  2863ba97ca ArmPlatformPkg: Change OPTIONAL keyword usage style
  9607597a74 ArmVirtPkg: Change OPTIONAL keyword usage style
  c8f46130f8 CryptoPkg: Change OPTIONAL keyword usage style
  fe2d81892f DynamicTablesPkg: Change OPTIONAL keyword usage style
  792433088c EmbeddedPkg: Change OPTIONAL keyword usage style
  c69fc80c80 EmulatorPkg: Change OPTIONAL keyword usage style
  9c721071d3 FmpDevicePkg: Change OPTIONAL keyword usage style
  e3917e22e7 MdeModulePkg: Change OPTIONAL keyword usage style
  d0e2f8232a MdePkg: Change OPTIONAL keyword usage style
  8874fa199d NetworkPkg: Change OPTIONAL keyword usage style
  79d49e162e OvmfPkg: Change OPTIONAL keyword usage style
  237295f46d PcAtChipsetPkg: Change OPTIONAL keyword usage style
  dc8fe5ec95 RedfishPkg: Change OPTIONAL keyword usage style
  12710fe93b SecurityPkg: Change OPTIONAL keyword usage style
  9b8507cabe ShellPkg: Change OPTIONAL keyword usage style
  18908e6131 SignedCapsulePkg: Change OPTIONAL keyword usage style
  f9c9215b55 SourceLevelDebugPkg: Change OPTIONAL keyword usage style
  902e76de19 StandaloneMmPkg: Change OPTIONAL keyword usage style
  4ec586b9f6 UefiCpuPkg: Change OPTIONAL keyword usage style
  e35dd32821 UefiPayloadPkg: Change OPTIONAL keyword usage style
  78bc3bdd2a UnitTestFrameworkPkg: Change OPTIONAL keyword usage style
  ea85f0fe13 ArmVirtPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  e3b855f283 CryptoPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  4a9d411662 DynamicTablesPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  db52c7f755 MdeModulePkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  098307e082 MdePkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  ed7f7c9168 NetworkPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  8e875037bf OvmfPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  deba54761a PcAtChipsetPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  f9f4fb2329 SecurityPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  7c2a6033c1 UefiCpuPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  429309e0c6 ArmPkg: Apply uncrustify changes
  40b0b23ed3 ArmPlatformPkg: Apply uncrustify changes
  2b16a4fb91 ArmVirtPkg: Apply uncrustify changes
  7c34237831 CryptoPkg: Apply uncrustify changes
  731c67e1d7 DynamicTablesPkg: Apply uncrustify changes
  e7108d0e96 EmbeddedPkg: Apply uncrustify changes
  a550d468a6 EmulatorPkg: Apply uncrustify changes
  bcdcc4160d FatPkg: Apply uncrustify changes
  45ce0a67bb FmpDevicePkg: Apply uncrustify changes
  111f2228dd IntelFsp2Pkg: Apply uncrustify changes
  7c7184e201 IntelFsp2WrapperPkg: Apply uncrustify changes
  1436aea4d5 MdeModulePkg: Apply uncrustify changes
  2f88bd3a12 MdePkg: Apply uncrustify changes
  d1050b9dff NetworkPkg: Apply uncrustify changes
  ac0a286f4d OvmfPkg: Apply uncrustify changes
  5220bd211d PcAtChipsetPkg: Apply uncrustify changes
  39de741e2d RedfishPkg: Apply uncrustify changes
  c411b485b6 SecurityPkg: Apply uncrustify changes
  47d20b54f9 ShellPkg: Apply uncrustify changes
  b878648967 SignedCapsulePkg: Apply uncrustify changes
  c1e126b119 SourceLevelDebugPkg: Apply uncrustify changes
  91415a36ae StandaloneMmPkg: Apply uncrustify changes
  053e878bfb UefiCpuPkg: Apply uncrustify changes
  e5efcf8be8 UefiPayloadPkg: Apply uncrustify changes
  7c0ad2c338 UnitTestFrameworkPkg: Apply uncrustify changes
  dc453b5164 .pytool/Plugin/UncrustifyCheck: Add Uncrustify CI plugin
  1832eb15aa UefiPayloadPkg/UefiPayloadPkg.fdf: Update DXE Apriori list
  ca78281c25 UefiPayloadPkg/PayloadEntry: Inherit 4/5-level paging from bootloader
  b2f7ee2ded UefiPayloadPkg: Increase SystemMemoryUefiRegionSize from 32M to 64M
  94e0a7bddb UefiPayloadPkg: Add missing Guid gUefiAcpiBoardInfoGuid
  2527723de9 UefiPayloadPkg: Add performance measurement feature
  ffdde9d719 UefiPayloadPkg: Skip ModuleInfo HOB in Payload
  965292135b UefiPayloadPkg/UefiPayloadPkg.dsc:Add BootManagerLib for BootManagerMenuApp
  85a678bf76 UefiPayloadPkg: Add integration instruction for coreboot common error
  7b28310008 BaseTools: Increase the DevicePath length for support more PCD value.
  d25b803e51 MdeModulePkg/Bus/Pci/UhciDxe: Fix the UsbHc memory allocate and free issue
  c82ab4d8c1 BaseTools/VfrCompile: Correct Bit Field Flags for numeric/one of
  2ddacfb6b8 OvmfPkg/SecMain: move SEV specific routines in AmdSev.c
  e2289d19d8 UefiCpuPkg/MpInitLib: move SEV specific routines in AmdSev.c
  2fe8edfe55 OvmfPkg/ResetVector: move clearing GHCB in SecMain
  3053183d41 OvmfPkg/ResetVector: introduce SEV metadata descriptor for VMM use
  707c71a01b OvmfPkg: reserve SNP secrets page
  cca9cd3dd6 OvmfPkg: reserve CPUID page
  f2dc28f0b6 OvmfPkg/ResetVector: pre-validate the data pages used in SEC phase
  34819f2cac OvmfPkg/ResetVector: use SEV-SNP-validated CPUID values
  d9822304ce OvmfPkg/MemEncryptSevLib: add MemEncryptSevSnpEnabled()
  7c3b2892ea OvmfPkg/SecMain: register GHCB gpa for the SEV-SNP guest
  d2b998fbdc OvmfPkg/VmgExitLib: use SEV-SNP-validated CPUID values
  a19b648952 OvmfPkg/PlatformPei: register GHCB gpa for the SEV-SNP guest
  19914edc5a OvmfPkg/AmdSevDxe: do not use extended PCI config space
  ade62c18f4 OvmfPkg/MemEncryptSevLib: add support to validate system RAM
  d706f8fec2 OvmfPkg/MemEncryptSevLib: add function to check the VMPL0
  11b15336f0 OvmfPkg/BaseMemEncryptSevLib: skip the pre-validated system RAM
  d39f8d88ec OvmfPkg/MemEncryptSevLib: add support to validate &gt; 4GB memory in PEI phase
  202fb22be6 OvmfPkg/SecMain: validate the memory used for decompressing Fv
  8eb79b5f4f OvmfPkg/PlatformPei: validate the system RAM when SNP is active
  26210f9436 MdePkg: Define ConfidentialComputingGuestAttr
  504ae26b80 OvmfPkg/PlatformPei: set PcdConfidentialComputingAttr when SEV is active
  b95908e043 UefiCpuPkg/MpInitLib: use PcdConfidentialComputingAttr to check SEV status
  f4e3ce5f53 UefiCpuPkg: add PcdGhcbHypervisorFeatures
  f5a6e1bab5 OvmfPkg/PlatformPei: set the Hypervisor Features PCD
  2c354252be MdePkg/GHCB: increase the GHCB protocol max version
  9c703bc0f1 UefiCpuPkg/MpLib: add support to register GHCB GPA when SEV-SNP is enabled
  d4d7c9ad5f UefiCpuPkg/MpInitLib: use BSP to do extended topology check
  b928eb44d5 OvmfPkg/MemEncryptSevLib: change the page state in the RMP table
  b7b8872031 OvmfPkg/MemEncryptSevLib: skip page state change for Mmio address
  ea3a12d970 OvmfPkg/PlatformPei: mark cpuid and secrets memory reserved in EFI map
  67484aed69 OvmfPkg/AmdSev: expose the SNP reserved pages through configuration table
  06544455d0 UefiCpuPkg/MpInitLib: Use SEV-SNP AP Creation NAE event to launch APs
  0f1d7477c0 OvmfPkg: Remove unused print service driver (PrintDxe)
  30631f0a26 MdePkg: Add missing Cache ID (in)valid define
  0077c22f6d MdePkg: Remove PPTT ID type structure
  a50b65ce22 ShellPkg: Update Acpiview PPTT parser to ACPI 6.4
  8cf2bdfcfb ShellPkg: Add Cache ID to PPTT parser
  b2bbe3df54 DynamicTablesPkg: Remove PPTT ID structure from ACPI 6.4 generator
  e139829dd6 DynamicTablesPkg: Update PPTT generator to ACPI 6.4
  e81a81e584 DynamicTablesPkg: Add CacheId to PPTT generator
  9afcd48a94 OvmfPkg: Handle Cloud Hypervisor host bridge
  2ccefa32a6 OvmfPkg: Create global entry point for SMBIOS parsing
  d8ef774346 OvmfPkg: Retrieve SMBIOS from Cloud Hypervisor
  66bce05f6d OvmfPkg: Generalize AcpiPlatformDxe
  7594c5bfe2 OvmfPkg: Install ACPI tables for Cloud Hypervisor
  f6df289a1c OvmfPkg/OvmfXen: Fix Xen build
  2b20a34fd5 OvmfPkg-EmuVariableFvbRuntimeDxe: Support Access To Memory Above 4G
  d5efc875ef MdePkg: Introduce CcMeasurementProtocol for CC Guest firmware
  a124cd4ef9 SecurityPkg: Support CcMeasurementProtocol in DxeTpm2MeasureBootLib
  8c06c53b58 SecurityPkg: Support CcMeasurementProtocol in DxeTpmMeasurementLib
  adf070ff56 OvmfPkg/Microvm: add PcdConfidentialComputingGuestAttr
  2686468c43 OvmfPkg/Bhyve: add MemEncryptSevLib
  61be49e0f7 OvmfPkg/PlatformCI: factor out PlatformBuildLib.py
  21ee379407 OvmfPkg/PlatformCI: add QEMU_SKIP
  64bccda534 OvmfPkg/PlatformCI: add BhyveBuild.py
  04eacd3943 OvmfPkg/PlatformCI: add MicrovmBuild.py
  8b8ae609a7 OvmfPkg/PlatformCI: add AmdSevBuild.py
  2722856a87 OvmfPkg/PlatformCI: dummy grub.efi for AmdSev
  1203eba58e OvmfPkg/PlatformCI: add XenBuild.py
  64ef0dd1d3 OvmfPkg/Microvm/fdt: add device tree support
  79dcaf7054 OvmfPkg/Microvm/fdt: load fdt from fw_cfg
  c802f8935c OvmfPkg/Microvm/fdt: add empty fdt
  2a68abf6ee OvmfPkg/Microvm/virtio: add virtio-mmio support
  e07d27e24d OvmfPkg/Microvm: add README
  7f1861be2b DynamicTablesPkg: AML Code generation for memory ranges
  0e7147fe75 DynamicTablesPkg: AML Code generation to create a named Package()
  fd5fc4bbb7 DynamicTablesPkg: AML Code generation to create a named ResourceTemplate()
  b2b8def4e3 DynamicTablesPkg: AML Code generation to add _PRT entries
  69ddfee1c3 DynamicTablesPkg: Add AmlAttachNode()
  ce306e48eb DynamicTablesPkg: Add Pci related objects
  e35a746cf5 DynamicTablesPkg: SSDT Pci express generator
  ec37fd9c1f DynamicTablesPkg: Fix multiple objects parsing
  557dede8a6 OvmfPkg/PlatformPei: ScanOrAdd64BitE820Ram improvements
  759e3c6d21 OvmfPkg/PlatformPei: prefer etc/e820 for memory detection
  41d8bb3038 OvmfPkg/PlatformPei: stop using cmos for memory detection
  7a6e6ae933 EmulatorPkg: Update lldbefi.py to work with current lldb which uses python3
  4d30352445 ArmPkg: Add SMC helper functions
  c039fa7ff0 ArmPkg: Update SMC calls to use the new ArmCallSmc0/1/2/3 functions
  90ad4b3b34 DynamicTablesPkg: Definition for HwInfoParser interface
  d59c5a20f8 DynamicTablesPkg: FdtHwInfoParser: CM Object descriptor helper
  5d8b5d171c DynamicTablesPkg: FdtHwInfoParser: Add FDT utility functions
  8d2691c3d5 DynamicTablesPkg: FdtHwInfoParser: Add Boot Arch parser
  3ebe1ff5c9 DynamicTablesPkg: FdtHwInfoParser: Generic Timer Parser
  51941f7558 DynamicTablesPkg: FdtHwInfoParser: Add Serial port parser
  e366a41ef0 DynamicTablesPkg: FdtHwInfoParser: Add GICC parser
  0fa1217726 DynamicTablesPkg: FdtHwInfoParser: Add GICD parser
  b04cf355a0 DynamicTablesPkg: FdtHwInfoParser: Add MSI Frame parser
  d250d408cf DynamicTablesPkg: FdtHwInfoParser: Add ITS parser
  7b6c8b30a5 DynamicTablesPkg: FdtHwInfoParser: Add GICR parser
  26bf034a59 DynamicTablesPkg: FdtHwInfoParser: Add GIC dispatcher
  c67bf628c8 DynamicTablesPkg: FdtHwInfoParser: Add PCI config parser
  deb01dfd7f DynamicTablesPkg: Add FdtHwInfoParser library
  9006967c8d DynamicTablesPkg: Handle 16550_WITH_GAS id
  b2d0ed20fd DynamicTablesPkg: Definition for DynamicPlatRepoLib interface
  2e2db65e39 DynamicTablesPkg: DynamicPlatRepo: Add TokenGenerator
  740e3bb634 DynamicTablesPkg: DynamicPlatRepo: Add TokenFixer
  5fe5b6f94f DynamicTablesPkg: DynamicPlatRepo: Add TokenMapper
  38f6d78c3b DynamicTablesPkg: Add DynamicPlatRepo library
  f14fff5135 StandaloneMmPkg/FvLib: Support large file with EFI_FFS_FILE_HEADER2.
  3a72ec71cd OvmfPkg: remove unused TPM options from MicrovmX64.dsc
  b47575801e OvmfPkg: move tcg configuration to dsc and fdf include files
  5711ff4d0b OvmfPkg: drop TPM_CONFIG_ENABLE
  b819388772 OvmfPkg: create Tcg12ConfigPei.inf
  4de8d61bce OvmfPkg: rework TPM configuration
  e6ea1464a8 OvmfPkg/PlatformPei: Revert "stop using cmos for memory detection"
  a6c0418651 ArmPkg/SmbiosMiscDxe: Remove duplicate HII string definition
  45e3842970 ArmPkg/SmbiosMiscDxe: Get full SMBIOS strings from OemMiscLib
  b451c69088 ArmPkg/ProcessorSubClassDxe: Get serial and part number from OemMiscLib
  8ed8568922 SecurityPkg: Debug code to audit BIOS TPM extend operations
  195f011973 SecurityPkg: Reallocate TPM Active PCRs based on platform support
  ab5ab2f603 SecurityPkg: TPM must go to Idle state on CRB command completion
  c63a10ecb7 EmbeddedPkg/AcpiLib: Add more helper functions
  f129b1f06f OvmfPkg/Bhyve: fix tls-enabled build
  ee1f8262b8 OvmfPkg: Call PlatformInitializeConsole for GPU passthrough case
  de9e5b7dc7 IntelFsp2WrapperPkg : FSPM/S UPD data address based on Build Type
  9ec2cc1f31 IntelFsp2WrapperPkg : Remove EFIAPI from local functions.
  ae8272ef78 MdeModulePkg/UsbBusDxe: fix NOOPT build error
  15c596aeeb OvmfPkg: Bhyve: Delete unused AcpiTables/Ssdt.asl file
  6612ff8561 UefiCpuPkg: Extend measurement of microcode patches to TPM
  e910f076ad BaseTools: Fix the bug of --cmd-len build option
  7935be0fbd IntelFsp2Pkg/FspSecCore: ExtendedImageRevision was not printed.
  c095122d4b MdeModulePkg/PciBusDxe: Enumerator to check for RCiEP before looking for RP
  d463c56ddd MdeModulePkg: Replace with UFS_UNIT_DESC to fix timeout problem
  45920941d9 MdeModulePkg: Refactoring UFS DME request and fix timing problem
  13d9e8ec98 MdeModulePkg: Put off UFS HCS.DP checking to fix timing problem
  079a58276b OvmfPkg/AmdSev/SecretPei: Mark SEV launch secret area as reserved
  9dd14fc91c MdePkg: Add registers of boot partition feature
  14a731096d UnitTestFrameworkPkg: CI YAML: Grant cmockery spell check exception
  6062002bd5 MdeModulePkg/PartitionDxe: Add break to handle invalid LBA0 in MBR
  7438a85bf1 BaseTools: Fix wrong variable header size
  c712ce2bb1 OvmfPkg/CloudHv: Add new target for Cloud Hypervisor
  a2da72b2ca OvmfPkg/CloudHv: Replace legacy 8254 PIT with local APIC timer
  6ecdda71fe OvmfPkg/CloudHv: Connect serial console
  1552050ce7 OvmfPkg/CloudHv: Remove legacy 8259 PIC support
  fdcea7ff6f OvmfPkg/CloudHv: Remove Q35 specifics
  71082d3d1b OvmfPkg/CloudHv: Reduce dependency on QemuFwCfg
  196be601f9 OvmfPkg/CloudHv: Remove video support
  7b6cbe0a81 OvmfPkg/CloudHv: Remove USB support
  e73d1bf96a OvmfPkg/CloudHv: Remove CSM support
  b66056ef21 OvmfPkg/CloudHv: add Maintainers.txt entry
  5302bd81d9 OvmfPkg: Add CloudHvX64 to the CI
  59c48c9314 UefiPayloadPkg: Change the user interface name of the Uiapp
  5801910013 UefiPayloadPkg: Not use BaseCpuTimerLib by default.
  772c5bb8dc FmpDevicePkg/FmpDxe: Update FmpDeviceCheckImageWithStatus() handling
  7709988dd8 RedfishPkg/RedfishRestExDxe:Simplify status check
  21320ef669 MdeModulePkg/Variable: Make only EFI_VARIABLE_NON_VOLATILE invalid
  7e5c603cba MdeModulePkg/SdMmcPciHcDxe: Robust improvements for SD card 1.8V switch
  ee67067f17 MdeModulePkg: VariableSmmRuntimeDxe: Fix Variable Policy Message Length
  5b39832e18 MdePkg: MmCommunication2: Update MM communicate2 function description
  ce37f45955 ArmPkg: MmCommunicationDxe: MM communicate function argument attributes
  541a077bd1 ArmPkg: MmCommunicationDxe: Update MM communicate `CommBuffer**` checks
  1aa1ec4574 ArmPkg: MmCommunicationDxe: Update MM communicate `CommSize` check
  8cc5590eab ArmPkg: MmCommunicationDxe: Update MM communicate `MessageLength` check
  6777e67383 EmbeddedPkg: Fix a build error in FwVol.c in X64 arch
  a867f3a704 UefiPayloadPkg: Use BaseCpuTimerLib for Universal Payload by default
  f4b7b473b4 MdeModulePkg/UefiBootManagerLib: Convert BmLoadOption to Variable Policy
  76b3d45b75 ShellPkg: Add the missing VariablePolicyHelperLib in ShellPkg.dsc
  8542fc5f95 NetworkPkg: Add the missing VariablePolicyHelperLib in NetworkPkg.dsc
  ae35314e7b Maintainers.txt: Add Sami Mujawar as reviewer for ArmPkg
  862ea6e836 OvmfPkg: change qemu default resolution to 1280x800
  e95b44c90e ArmVirtPkg: change qemu default resolution to 1280x800
  929804b172 OvmfPkg: add PcdVideoResolutionSource
  7f25ddbc03 OvmfPkg/QemuVideoDxe: simplify InitializeBochsGraphicsMode
  336da55ca8 OvmfPkg/QemuVideoDxe: drop QEMU_VIDEO_BOCHS_MODES-&gt;ColorDepth
  55c05427b9 OvmfPkg/QemuVideoDxe: factor out QemuVideoBochsAddMode
  49a2d8cbf5 OvmfPkg/QemuVideoDxe: parse edid blob, detect display resolution
  ba79becd55 OvmfPkg/BaseCachingPciExpressLib: Migrate BaseCachingPciExpressLib
  103fa647d1 ArmPkg: Replace CoreId and ClusterId with Mpidr in ARM_CORE_INFO struct
  742dafd2cc DynamicTablesPkg: Print specifier macro for CM_OBJECT_ID
  13136cc311 DynamicTablesPkg: FdtHwInfoParserLib: Parse Pmu info
  5751d60821 DynamicTablesPkg: AmlLib: AmlAddPrtEntry() to handle GSI
  5816bd3eab DynamicTablesPkg: AcpiSsdtPcieLibArm: Remove link device generation
  dc1118fa0d ArmVirtPkg: Add cspell exceptions
  0dbd356983 ArmVirtPkg/Kvmtool: Add DSDT ACPI table
  312ef7a0a4 ArmVirtPkg/Kvmtool: Add Configuration Manager
  17a02163bd ArmVirtPkg/Kvmtool: Enable ACPI support
  5b3c682d91 ArmVirtPkg/Kvmtool: Enable Acpiview
  017564d637 ArmPkg/ArmMmuLib AARCH64: avoid EL0 accessible mappings
  45b1612659 DynamicTablesPkg: Add Memory32Fixed function
  007a95055b DynamicTablesPkg: Remove redundant cast in AmlCodeGenReturn
  33189f0527 DynamicTablesPkg: Add AmlCodeGenMethodRetInteger function
  a4b7aa362d MdeModulePkg/Bus/Pci/PciBusDxe: Support platform PCI ROM override
  6fb09da89f ShellPkg: Fix incorrect PPTT FlagName dereference
  c09dbc92e9 BaseTools/Conf: Add new macro for customizing dll file reduction.
  d4ac53aa91 BaseTools: Fix error leg in DscBuildData.py
  f78b937c95 MdeModulePkg/RuntimeDxe: clear mVirtualMapMaxIndex
  96b8b5fd10 MdeModulePkg/UiApp: Fix spelling of 'FRONTPAGE'
  bd676f080a Maintainers.txt: add missing github IDs to OvmfPkf/Fdt reviewers
  1f54eaa725 Maintainers.txt: update email for Leif Lindholm
  b360b0b589 Maintainers.txt: Update email address
  c9b7c6e0cc BaseTools: Update CLANG{35,38}_WARNING_OVERRIDES to ignore unused vars
  42af706dfb BaseTools: Update brotli submodule
  1193aa2dfb MdeModulePkg: update brotli submodule
  85589ddbf6 OvmfPkg/VmgExitLib: Fix uninitialized variable warning with XCODE5
  c28e376edc OvmfPkg/FvbServicesSmm: use the VmgExitLibNull
  8a57673316 ShellPkg: Fix Ping GetTimerPeriod API failure
  b24306f15d NetworkPkg: Fix incorrect unicode string of the AKM/Cipher Suite
- Add amd-sev-es to the following descriptors because James Fehlig
  tested them (bsc#1196879):
    60-ovmf-x86_64.json
    60-ovmf-x86_64-2m.json
    60-ovmf-x86_64-ms.json
    60-ovmf-x86_64-2m-ms.json
- Backported patches in ovmf-bsc1196879-sev-fix.patch for fixing SEV:
    de463163d9 OvmfPkg/AmdSev: reserve snp pages
  63c50d3ff2 OvmfPkg/ResetVector: cache the SEV status MSR value in workarea
  f1d1c337e7 OvmfPkg/BaseMemEncryptLib: use the SEV_STATUS MSR value from workarea</changelog>
  <changelog author="fvogt@suse.com" date="1647345600">- TPM_ENABLE got renamed to TPM2_ENABLE and TPM_CONFIG_ENABLE removed
  (except on ARM for some reason) (boo#1197104)</changelog>
  <changelog author="jlee@suse.com" date="1651406400">- Respin amd-sev and amd-sev-es features
  After more testing, we found that not all descriptors can support
  both amd-sev with amd-sev-es. So we removed all amd-sev and amd-sev-es
  feature tags but only keep them in ovmf-x86_64-2m.json and
  60-ovmf-x86_64.json. (bsc#1198246#c75)</changelog>
  <changelog author="jlee@suse.com" date="1662465600">- Add patches to disable option ROM on sev (bsc#1199156)
  - Backported the following patches:
  - ovmf-MdeModulePkg-Update-PciEnumeratorSupport-to-ignore-O.patch
  cb8349f01a        MdeModulePkg: Update PciEnumeratorSupport to ignore OptionRom if needed
  - ovmf-OvmfPkg-IncompatiblePciDeviceSupportDxe-Ignore-Optio.patch
  c477b2783f        OvmfPkg/IncompatiblePciDeviceSupportDxe: Ignore OptionRom in Td guest
  - ovmf-OvmfPkg-IncompatiblePciDeviceSupportDxe-Refine-the-c.patch
  149ed8e421        OvmfPkg/IncompatiblePciDeviceSupportDxe: Refine the configuration
  - To disable option ROM both on tdx and sev:
  ovmf-bsc1199156-OvmfPkg-IncompatiblePciDeviceSupportDxe-Ignore-Optio.patch</changelog>
  <changelog author="jlee@suse.com" date="1665144000">- Add patches to fix detection issue of NVME controller (bsc#1203825)
  - ovmf-MdeModulePkg-NvmExpressDxe-fix-check-for-Cap.Css.patch
  - ovmf-MdeModulePkg-NvmExpressPei-fix-check-for-NVM-command.patch</changelog>
  <changelog author="jlee@suse.com" date="1681128000">- Add ovmf-Revert-OvmfPkg-OvmfXen-Set-PcdFSBClock.patch to revert
  71cdb91f313380152d7bf38cfeebe76f5b2d39ac patch (bsc#1205613)
  - 71cdb91f313380152d7bf38cfeebe76f5b2d39ac OvmfPkg/OvmfXen: Set PcdFSBClock
  - We are waiting better upsteam patch, revert the issue patch first.
    Then PcdFSBClock will back to fixed variable.
  - Reference: https://edk2.groups.io/g/devel/topic/94891128#96077
  https://bugzilla.tianocore.org/show_bug.cgi?id=4340</changelog>
  <changelog author="jlee@suse.com" date="1683979200">- Add ovmf-SecurityPkg-DxeImageVerificationLib-Check-result-of-.patch
  to check result of GetEfiGlobalVariable2 (CVE-2019-14560, bsc#1174246)</changelog>
  <changelog author="jlee@suse.com" date="1683979201">- Add ovmf-MdeModulePkg-PiSmmCore-SmmEntryPoint-underflow-CVE-2.patch
  for MdeModulePkg/PiSmmCore: SmmEntryPoint underflow (CVE-2021-38578)
  (bsc#1196741)</changelog>
</package>
<package pkgid="4f0fc6034c67ef2fe82725df8b8332d1435790f6d4844e618f8a59b6ca7ca7da" name="qemu-s390x" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="97150c37e7fe62a8e5a5a39e91d7506abf5fbf088d3b5c6bc262f2c1ebe073b6" name="qemu-s390x" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="71673bfee29ca88bb6a86e70f12cdbebb6df40a770a5f6be6035e4597479b026" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.15.0_0_g2dd4b9b" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="00c8c405aae972566968b9aea344683bc09870320c4d17811fc3883116baf1f5" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.15.0_0_g2dd4b9b" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="77fac3c08baa11c5a14c1e43a06fd3d35cae756b5a70cffb8c6ed9afb397e2c9" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="7c68ac46c29bee6c930ebc454d871057e2d6853207507d240c78d414bf3b2bf2" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="85f4364dc4a8871ee0afc80993c229c4651865a96cb5ac0f4590da4d01e08929" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="3108541463a0d7b4bef3c34afb6c29b7d6d80c5237c321d15a6d717a82cd99e4" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="fa5513f3dd6fa0d98355e0a59159e5f85817aabe640868438e3b33cef5725582" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="441191c36e0e0badb3716da6169374dd06d7252043c705473e72d3d7d6b59cf9" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="ef0603475f9bdf742a44e939328fe8925bbf438dca378623b11ee749fef1dc01" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="0078a41135c78627d27fdee4b3761824f7125f95f90c9ffd7d0051542213c0fc" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="8b7c4cb2a5133de8d1b97d6a8fcef89c03ffab9aaf640a126b65d844377b64c2" name="qemu-uefi-aarch64" arch="noarch">
  <version epoch="0" ver="202202" rel="150400.5.10.1"/>
  <changelog author="glin@suse.com" date="1625832000">- Add ovmf-fix-xen-s3-detection.patch to fix the S3 detection in
  ovmf-xen
- Add ovmf-xen-add-qemu-kernel-loader-fs.patch to add
  QemuKernelLoaderFsDxe to ovmf-xen to load kernel from qemu fw_cfg</changelog>
  <changelog author="jlee@suse.com" date="1634212800">- Update to edk2-stable202108
  - Features (https://github.com/tianocore/edk2/releases):
  OvmfPkg: remove Xen support from OvmfPkg*.dsc, in favor of OvmfXen.dsc
  Add CLANGDWARF toolchain for generating ELF+DWARF
  NetworkPkg/IScsiDxe: remotely exploitable buffer overflows
  NetworkPkg/IScsiDxe: add sha256 support to CHAP
  Create header files and multiple Hobs for Universal Payload
  Add search feature in config editor
  Add additional build option to treat Dynamic Pcd as DynamicEx Pcd
  Add a new MicrocodeLib for microcode loading
  Implement key enrolment from default key variables
  StandaloneMm support for 32bit Arm machines
  Add firmware support for Cloud Hypervisor on arm64
  Support architecture-specific openssl acceleration
  Support measured AMD SEV boot with kernel/initrd/cmdline
  Add ACPI 6.4 header
  Add new BootDiscoveryPolicyUiLib
  - Patches (git log --oneline --reverse edk2-stable202105~..edk2-stable202108):
  e1999b264f ArmPkg/ArmGic: Fix maximum number of interrupts in GICv3
  b8ed8c0fb2 Maintainers.txt: add Sami Mujawar as top-level ArmVirtPkg reviewer
  dbc22a1785 UefiCpuPkg/MpInitLib: Allocate a separate SEV-ES AP reset stack area
  0095070e70 MdePkg/Register/Amd: expand the SEV MSR to include the SNP definition
  f828fc9876 MdePkg/Register/Amd: realign macros with more space for future expansion
  34e16ff883 MdePkg/Register/Amd: define GHCB macros for hypervisor feature detection
  f0983b2074 MdePkg/Register/Amd: define GHCB macro for Register GPA structure
  4665fa6503 MdePkg/Register/Amd: define GHCB macro for the Page State Change
  dfd41aef78 MdePkg/Register/Amd: define GHCB macros for SNP AP creation
  5a7cbd54a1 MdePkg/BaseLib: add support for PVALIDATE instruction
  2b5b2ff04d MdePkg/BaseLib: add support for RMPADJUST instruction
  901a9bfc3a OvmfPkg/BaseMemEncryptSevLib: introduce MemEncryptSevClearMmioPageEncMask()
  c394fa4c9e OvmfPkg/AmdSevDxe: use MemEncryptSevClearMmioPageEncMask() to clear EncMask
  8ee4e52ba8 OvmfPkg/QemuFlashFvbServicesRuntimeDxe: use Mmio helper to clear enc mask
  b4a8de5d27 OvmfPkg/TpmMmioSevDecryptPei: use MemEncryptSevClearMmioPageEncMask()
  adfa3327d4 OvmfPkg/BaseMemEncryptSevLib: remove Flush parameter
  fe5da0927a IntelFsp2WrapperPkg: Remove microcode related PCDs
  d3ff5dbe1d MdePkg: MmControl: Fix function and structure definition mismatches
  197e27c90a MdePkg: Add new 16550-compatible Serial Port Subtypes to DBG2
  fdf3666f01 MdePkg: Update DBG2 and SPCR header with NVIDIA 16550 Subtype
  b233eb1849 EmbeddedPkg/RealTimeClockRuntimeDxe: Improve GetWakeupTime
  b5379899b3 MdeModulePkg/Xhci: Fix TRT when data length is 0
  039e07f626 MdePkg/MdeModulePkg: Move AML_NAME_SEG_SIZE definition
  1f515342d8 DynamicTablesPkg: Use AML_NAME_SEG_SIZE define
  75e9154f81 OvmfPkg/VirtioMmioDeviceLib: Add EFIAPI to VirtioMmioSetQueueAddress
  c410ad4da4 MdePkg/BaseLib: Fix AsmReadSs() with GCC toolchain
  c1aa3bab12 BaseTools: Add ClangBase.lds for CLANG8 tool chain with max-page-size
  c6b872c6ab BaseTools GenFw: Support CLANG8ELF with conversion ELF to PE/COFF image
  cf9959adff BaseTools: Update build_rule to skip CLANG resource section generation
  4b56ad2049 BaseTools: Add new CLANG8ELF tool chain for new LLVM/CLANG8
  e1636fe18f BaseTools: Update ClangBase.lds to keep dynamic section
  924c2b847f BaseTools: Change CLANG8ELF to CLANGDWARF
  e25566cd2b OvmfPkg: remove the Xen drivers from the IA32, IA32X64, and X64 platforms
  aa7f19f480 OvmfPkg: remove the Xen drivers from the AmdSev platform
  7bc04a75a7 OvmfPkg: switch IA32, IA32X64, X64 to the fw_cfg-only ACPI platform driver
  d697037446 OvmfPkg: switch the AmdSev platform to the fw_cfg-only ACPI platform driver
  ae4aa4a346 OvmfPkg/README: bump minimum QEMU version to 1.7.1, machine types to 1.7
  2a85d9b07e OvmfPkg/AcpiPlatformDxe: fix header file warts
  180f1908b3 OvmfPkg/AcpiPlatformDxe: sort #includes and [LibraryClasses]
  6d1e56e715 OvmfPkg/AcpiPlatformDxe/QemuLoader.h: remove QemuFwCfgLib class dependency
  747b1ef725 OvmfPkg/AcpiPlatformDxe: move "QemuLoader.h" to IndustryStandard
  cc302b799e OvmfPkg/AcpiPlatformDxe: consolidate #includes and [LibraryClasses]
  c9bba52fc7 OvmfPkg/XenAcpiPlatformDxe: create from AcpiPlatformDxe
  a31fcb5096 OvmfPkg/AcpiPlatformDxe: remove the "AcpiPlatformDxe.inf" driver
  4115840c28 OvmfPkg/XenAcpiPlatformDxe: remove the QEMU ACPI linker/loader client
  d6ba8aa6ef OvmfPkg/XenAcpiPlatformDxe: remove QEMU fw_cfg dependency
  3f975ee570 OvmfPkg/XenAcpiPlatformDxe: remove the InstallAcpiTable() helper function
  8f8d3d90c5 OvmfPkg/XenAcpiPlatformDxe: remove OVMF's built-in ACPI tables
  4174c5c787 OvmfPkg/Bhyve/AcpiPlatformDxe: fix file path typo in comment
  d491c88a0c OvmfPkg/AcpiTables: remove unused module
  e7641171b6 OvmfPkg/OvmfXen: make "PcdPciDisableBusEnumeration" Fixed-at-Build
  3357ac7380 OvmfPkg/XenAcpiPlatformDxe: remove delayed ACPI table installation
  d06eb2d1d9 OvmfPkg/PlatformPei: remove Xen support
  8899e3fe6a OvmfPkg: drop PcdPciDisableBusEnumeration from the IA32, IA32X64, X64 DSCs
  2833589ad0 OvmfPkg: drop PcdPciDisableBusEnumeration from the AmdSev platform
  e43cca74ad OvmfPkg/Bhyve: make "PcdPciDisableBusEnumeration" Fixed-at-Build
  b005f9f1f5 OvmfPkg/OvmfXen: remove IncompatiblePciDeviceSupport DXE driver
  8c8f886f27 OvmfPkg/Bhyve: remove IncompatiblePciDeviceSupport DXE driver
  984c93ece3 OvmfPkg/IncompatiblePciDeviceSupportDxe: remove PcdPciDisableBusEnumeration
  32fef03563 OvmfPkg/PciHostBridgeLib: consolidate #includes and INF file sections
  e120c962f5 OvmfPkg/PciHostBridgeLibScan: create from PciHostBridgeLib
  c2f24ba321 OvmfPkg/Bhyve: consume PciHostBridgeLibScan
  307763c3da OvmfPkg/OvmfXen: consume PciHostBridgeLibScan
  242678da2a OvmfPkg/PciHostBridgeLib: remove Bhyve and Xen support
  33d4f3e39e OvmfPkg/PciHostBridgeLibScan: remove QEMU (fw_cfg) support
  4c81178cf0 OvmfPkg/PciHostBridgeLibScan: remove PcdOvmfHostBridgePciDevId
  8af38170b5 OvmfPkg/PciHostBridgeLibScan: clean up file names and file-top comments
  7e25086a00 OvmfPkg/SmbiosPlatformDxe: clean up #includes and INF
  5072593738 OvmfPkg/SmbiosPlatformDxe: return EFI_NOT_FOUND if there is no SMBIOS data
  4db374562f OvmfPkg/SmbiosPlatformDxe: locate SMBIOS protocol in InstallAllStructures()
  a8ab14424e OvmfPkg/SmbiosPlatformDxe: split GetXenSmbiosTables() decl. to new header
  9d84e74ca0 OvmfPkg/SmbiosPlatformDxe: declare InstallAllStructures() in header file
  d4a8aaee73 OvmfPkg/SmbiosPlatformDxe: create Xen-specific module INF file
  ce270905bf OvmfPkg/SmbiosPlatformDxe: split Xen entry point from QEMU entry point
  51adb689e1 OvmfPkg: restrict XenPlatformLib to BdsDxe in the IA32, IA32X64, X64 DSCs
  ddb3fdbef3 BaseTools GenFw: Fix regression issue to convert the image to ACPI data
  558d83ab1a OvmfPkg/README: Fix typo in README
  beb443fde0 ShellPkg: Fix typo
  702ba436ed OvmfPkg/PlatformCI: bump QEMU choco package version to 2021.5.5
  83761337ec NetworkPkg/IScsiDxe: wrap IScsiCHAP source files to 80 characters
  29cab43bb7 NetworkPkg/IScsiDxe: simplify "ISCSI_CHAP_AUTH_DATA.InChallenge" size
  95616b8661 NetworkPkg/IScsiDxe: clean up "ISCSI_CHAP_AUTH_DATA.OutChallengeLength"
  e8f28b09e6 NetworkPkg/IScsiDxe: clean up library class dependencies
  cf01b2dc8f NetworkPkg/IScsiDxe: fix potential integer overflow in IScsiBinToHex()
  d90fff40cb NetworkPkg/IScsiDxe: assert that IScsiBinToHex() always succeeds
  dc469f1371 NetworkPkg/IScsiDxe: reformat IScsiHexToBin() leading comment block
  47b76780b4 NetworkPkg/IScsiDxe: fix IScsiHexToBin() hex parsing
  54e90edaed NetworkPkg/IScsiDxe: fix IScsiHexToBin() buffer overflow
  b8649cf2a3 NetworkPkg/IScsiDxe: check IScsiHexToBin() return values
  288bd74a22 Pytool: SpellCheck: Fix incorrect file mask across package matrices
  1ad794b627 MdeModulePkg: Fix device path when boot manager menu is from different FV
  11b1c1d4b9 SecurityPkg: TcgStorageOpalLib: Initialize SupportedAttributes parameter.
  d58016b768 UefiPayloadPkg: Get platform specific logic via protocol for BDS
  d8c18ba3f4 MdeModulePkg: Add Universal Payload general definition header file
  b597b6e24c MdeModulePkg: Add new structure for the PCI Root Bridge Info Hob
  99de2e7e03 UefiPayloadPkg: UefiPayload retrieve PCI root bridge from Guid Hob
  9d53e01efe MdeModulePkg: Add new structure for the Universal Payload SMBios Table Hob
  70e8c9c3bc MdeModulePkg/Universal/SmbiosDxe: Scan for existing tables
  302a8f353c UefiPayloadPkg: Create gUniversalPayloadSmbiosTableGuid Hob
  75293330ea MdeModulePkg: Add new structure for the Universal Payload ACPI Table Hob
  761329ee27 MdeModulePkg/ACPI: Install ACPI table from HOB.
  8c0d678063 UefiPayloadPkg: Create gUniversalPayloadAcpiTableGuid Hob
  fa24b6ed26 UefiPayloadPkg: Use DynamicEx instead of Dynamic to pass PCD across binary
  c511426abe MdeModulePkg/UniversalPayload: Add definition for extra info in payload
  fe471d4a57 UefiPayloadPkg: Add PayloadLoaderPeim which can load ELF payload
  ab2b389e7a PeiCore: Remove assertion when failing to load PE image
  1b380aa603 BaseTools GenFw: Keep read only alloc section as text when convert ELF
  9cf9de668f StandaloneMmPkg: Core: Spelling error in comment
  610385fa3b ArmPlatformPkg: SpellCheck: Switch spellcheck CI to AuditOnly
  04ddd1271e ArmPkg: SpellCheck: Update valid acronyms in ExtendedWords
  cdf7544703 MdeModulePkg PciBusDxe: Increase the width of data read during oprom shadow
  2847c72fda Maintainers.txt: Add Reviewers for Universal Payload definitions
  1162ae8297 Maintainers.txt: Add reviewers for ACPI and SMBIOS modules
  a63914d3f6 ArmPkg: Move cache defs used in Universal/Smbios into ArmCache.h
  6cfeeb71c4 UefiCpuPkg/CpuCommonFeaturesLib: Correct the CPU location check
  d9a7612f8d MdeModulePkg/BdsDxe: Update BdsEntry to use Variable Policy
  5959879e92 ArmVirtPkg: Add PCIe host bridge utility lib for ArmVirtPkg
  4dda0f7ab4 ArmVirtPkg: Enable PCIe support for Kvmtool
  1e5e58d39b UefiPayloadPkg/UefiPayloadEntry: Improve bootloader memrange parsing
  7471751a4d UefiPayloadPkg/UefiPayloadEntry: Remove 4GB memory WA
  20ca528828 CryptoPkg: BaseCryptLib: Update Salt length requirement for RSA-PSS scheme.
  18b2272e4d Azurepipeline: SpellCheck: Enforce Node dependency to use version 14.x
  eba32695ee CryptoPkg/BaseCryptLib: Enabled CryptSha512 for Smm/Runtime drivers
  12e34cd2f7 OvmfPkg/Bhyve: clean up TPM_ENABLE remnants
  82f727c4af UefiPayloadPkg: Add HobLib for UniversalPayload
  ea0bd5f6a7 MdeModulePkg: Add new structure for the Universal Payload Serial Port Info
  a75c029f60 UefiPayloadPkg: Add a separate PlatformHookLib for Universal Payload
  d63595c3c9 UefiPayloadPkg: Update the function definition of HobConstructor
  0ff6de9358 UefiPayloadPkg: Create separate Payload Entry for UniversalPayload
  b208d37c73 UefiPayloadPkg: Get and enter DxeCore for Universal Payload
  27cb64fffc UefiPayloadPkg: Fix up UPL Pcd database
  6b69f73b59 UefiPayloadPkg: Include UniversalPayLoad modules in UefiPayloadPkg.dsc
  86e6948cfb UefiPayloadPkg: Remove assert when reserve MMIO/IO resource for devices
  2db0ed93ff UefiPayloadPkg: Add macro to enable and disable some drivers
  3eb72b308a UefiPayloadPkg: Add PcdInstallAcpiSdtProtocol feature in UefiPayloadPkg
  caa139fe17 UefiPayloadPkg: Add PcdResetOnMemoryTypeInformationChange in UefiPayloadPkg
  8efd912baf UefiPayloadPkg: Add new structure for BootManagerMenuFile HOB
  19a541d70e UefiPayloadPkg: consume the BootManagerMenuFile HOB
  333a866106 BaseTools: Remove check for Split.exe in toolset.bat
  f0a3f6d9c3 BaseTools: Fix spelling of "overwrite" and "overwriting" in toolset.bat
  17143c4837 BaseTools: Reset ERRORLEVEL in toolsetup.bat after edk2basetools check
  abfff7c45d BaseTools GenFw: Add support for RISCV GOT/PLT relocations
  27b8a52957 MdePkg: MmConfiguration: Move definition of EFI_MM_RESERVED_MMRAM_REGION
  d1fc3d7ef3 MdePkg: MmConfiguration: Added definition of MM Configuration PPI
  5a2e030f73 OvmfPkg/GenericQemuLoadImageLib: plug cmdline blob leak on success
  932449710c OvmfPkg/X86QemuLoadImageLib: plug cmdline blob leak on success
  24b0e9d128 Revert "OvmfPkg/QemuKernelLoaderFsDxe: don't expose kernel command line"
  cf20302474 OvmfPkg/GenericQemuLoadImageLib: Read cmdline from QemuKernelLoaderFs
  9421f5ab8d OvmfPkg/X86QemuLoadImageLib: State fw_cfg dependency in file header
  b37cfdd280 OvmfPkg/XenPlatformPei: Relocate shared_info page mapping
  55dee4947b MdePkg : Add IPMI Macro and Structure Defintions to resolve build errors
  580b11201e IntelFsp2Pkg: Add Config Editor tool support
  939ed3a592 UefiPayloadPkg/PayloadLoader: Fix bug in locating relocation section
  3cde0d553d UefiPayloadPkg/PayloadLoader: Remove assertion
  49eeda113a NetworkPkg/IScsiDxe: re-set session-level authentication state before login
  7eba9f698e NetworkPkg/IScsiDxe: add horizontal whitespace to IScsiCHAP files
  7b6c2b2a26 NetworkPkg/IScsiDxe: distinguish "maximum" and "selected" CHAP digest sizes
  903ce1d8f8 NetworkPkg/IScsiDxe: support multiple hash algorithms for CHAP
  47fea2abcb NetworkPkg/IScsiDxe: support SHA256 in CHAP
  bb33c27fbe NetworkPkg: introduce the NETWORK_ISCSI_MD5_ENABLE feature test macro
  8697dc60cc Maintainers.txt: Update Maintainers and reviewers for UefiPayloadPkg
  fea7901dba UefiPayloadPkg: Fix the build failure
  1e0c441c92 OvmfPkg/Bhyve: add USB support
  44ced03798 OvmfPkg/Bhyve: use static PCI32Base address
  b3db0cb1f8 MdeModulePkg/PartitionDxe: Ignore PMBR BootIndicator per UEFI spec
  0a6b303dce UefiCpuPkg/ExceptionLib: Conditionally clear shadow stack token busy bit
  d10e058016 MdeModulePkg/RegularExpressionDxe: Fix memory assert in FreePool()
  4c051c2c65 MdeModulePkg: Update YAML file to fix CI error
  31fcee6d99 ArmVirtPkg: Add PlatformHasAcpiDtDxe for Cloud Hypervisor
  c28fc8ab3b ArmVirtPkg: Install Acpi tables for Cloud Hypervisor
  0e3b6bd0ee ArmVirtPkg: support Cloud Hypervisor in edk2
  b560e9d9b6 IntelFsp2Pkg: PatchFv parseInfFile function modification
  f47c4676dd Pytool: SpellCheck: Defer path expansion in cspell parameters
  cc89d245f9 Maintainers.txt: remove Laszlo Ersek's entries
  84af6ea320 BaseTools/Scripts: Ignore Mergify merge commits in PatchCheck.py
  b491eace37 .mergify: Simplify Mergify rules using GitHub status checks
  5ef08a49e3 .azurepipelines: Remove FINISHED and FAILED states
  ad1009ec62 MdePkg/Include: Add STATIC_ASSERT for L'' and L"" strings
  3de3c24755 BaseTools: Remove non-ascii character of StructurePcd comment
  40a9066439 BaseTools: Enable the flag to treat dynamic pcd as dynamicEx
  22fe311bd2 .pytool/EccCheck: Locate BaseTools dir with EDK_TOOLS_PATH
  a050c599df .pytool/EccCheck: Rename edk2_path as workspace_path
  50672d2692 .pytool/EccCheck: Check ecc_csv exists
  fb5b6220a9 .pytool/EccCheck: Set PACKAGES_PATH env var in Ecc
  fda5226aa3 UefiPayloadPkg: Dump hob information from boot loader
  7d748705b1 MdeModulePkg: Change the PldHeader to Header in ExtraData.h
  9bf4aee734 UefiPayloadPkg: Assign the length of UniversalPayload ExtraData
  d0b6596b8e MdeModulePkg/RamDiskDxe: Init list head before registering RamDisk protocol
  91f5d3b410 IntelFsp2Pkg: BaseCacheLib EfiProgramMtrr MtrrNumber Should be UINT32
  be282b1493 UefiPayloadPkg: Add PCD_DYNAMIC_AS_DYNAMICEX and set to True
  cac83b6f3b IntelFsp2Pkg: Add search function for Config Editor
  4bac086e8e UefiPayloadPkg: Add FV Guid for DXEFV and PLDFV
  fddb8d24ec ArmPlatformPkg/Scripts: Infer dll load address from console output
  885efcd3f9 MdePkg/Include: Smbios Specification 3.4.0 changes
  83b43c4cb1 MdeModulePkg PCD: Print which PCD was unable to be found
  c32c5911c4 BaseTools GenFw: Add support for R_RISCV_PCREL_LO12_S relocation
  097aeeb119 MdePkg/BaseLib: Add MemoryFence implementation for RiscV64
  391cffcb61 MdeModulePkg PiSmmCore: Change MemoryAttributes message to DEBUG_VERBOSE
  8781b143de BaseTools/Scripts: Fix GetMaintainer.py line endings
  28ef05ce10 BaseTools/Scripts: Allow GitHub ID at end Maintainers.txt lines
  2f5ad3f451 Maintainers.txt: Add GitHub IDs
  332632abf3 Maintainers.txt: Add Jiewen Yao as OvmfPkg Maintainer
  4d28a1c2fd BaseTools: Remove COMMON section from the GCC discard list
  878a92a887 CryptoPkg/OpensslLib: Add native instruction support for X64
  147f34b56c CryptoPkg/OpensslLib: Commit the auto-generated assembly files for X64
  ac70e71b1f NetworkPkg: Making the HTTP IO timeout value programmable with PCD
  ab796d3e2a NetworkPkg: Add HTTP Additional Event Notifications
  b461d67639 OvmfPkg/ResetVector: move SEV specific code in a separate file
  7f05102f65 OvmfPkg/ResetVector: add the macro to invoke MSR protocol based VMGEXIT
  dc485c556d OvmfPkg/ResetVector: add the macro to request guest termination
  f05eb2dfe5 OvmfPkg/AmdSev/SecretDxe: fix header comment to generic naming
  35e267cb34 OvmfPkg/AmdSev: use GenericQemuLoadImageLib in AmdSev builds
  a26a08dc1f OvmfPkg: PlatformBootManagerLibGrub: Allow executing kernel via fw_cfg
  0cb48007f7 OvmfPkg: add library class BlobVerifierLib with null implementation
  c73e31f54d OvmfPkg: add BlobVerifierLibNull to DSC
  6bf5580a3d ArmVirtPkg: add BlobVerifierLibNull to DSC
  d10ad8444f OvmfPkg/QemuKernelLoaderFsDxe: call VerifyBlob after fetch from fw_cfg
  5ace477f34 OvmfPkg/AmdSev/SecretPei: build hob for full page
  0deeab36d1 OvmfPkg/AmdSev: reserve MEMFD space for for firmware config hashes
  385b9d80a0 OvmfPkg/AmdSev: add BlobVerifierLibSevHashes
  514b3aa08e OvmfPkg/AmdSev: Enforce hash verification of kernel blobs
  8e6bb64fe4 EmbeddedPkg/VirtualRealTimeClockLib: Fix SetTime issues
  610bcc69ed ArmVirtPkg: Remove meaningless comment
  3445058aea MdeModulePkg/CapsuleApp: Fix typo in error message
  2e1fb41339 build: Fix python3.10 threading DeprecationWarnings
  0b1b0a9674 python: Replace distutils.utils.split_quotes with shlex.split
  fc50df0d8e BaseTools: Drop check for distutils.utils
  03e77558d4 BaseTools: use shutil.copyfile instead shutil.copy2
  2b47aaecef MdeModulePkg: Add BootDiscoveryPolicyUiLib.
  bb806a6e88 SecurityPkg: Create SecureBootVariableLib.
  9732659698 SecurityPkg: Create library for enrolling Secure Boot variables.
  12a4d0cb9d ArmVirtPkg: add SecureBootVariableLib class resolution
  3d427c5f83 OvmfPkg: add SecureBootVariableLib class resolution
  b926956418 EmulatorPkg: add SecureBootVariableLib class resolution
  db959018b6 SecurityPkg: Remove duplicated functions from SecureBootConfigDxe.
  a97e9e327e ArmPlatformPkg: Create include file for default key content.
  94e065582b SecurityPkg: Add SecureBootDefaultKeysDxe driver
  19107590b6 SecurityPkg: Add EnrollFromDefaultKeys application.
  45f3dd2ce9 SecurityPkg: Add new modules to Security package.
  55266a9b8a SecurityPkg: Add option to reset secure boot keys.
  6355287206 Maintainers.txt: Add new maintainer and reviewer to EmbeddedPkg/
  9abc60f9f7 EmbeddedPkg/libfdt: Add strcmp and strncpy to libfdt_env.h
  0856cdc89e MdePkg: add definition of LINUX_EFI_INITRD_MEDIA_GUID
  97fdcbda4e OvmfPkg: Remove Initrd LINUX_EFI_INITRD_MEDIA_GUID
  4de77ae989 UefiCpuPkg/CpuCacheInfoLib: Sort CpuCacheInfo array
  3c6107758b SecurityPkg: Fix GetSupportedAndActivePcrs counter calculation
  b40bdd6ecd UefiPayloadPkg: Add Fixed PCDs and use Macro to define the default value.
  d497eace3b UefiPayloadPkg: define some PCD as DynamicEX PCD
  ac6e5d6b41 UefiPayloadPkg: change the default value of some PCDs.
  672bd1c711 UefiPayloadPkg: Add a macro to enable or diable the serial driver.
  d02dbb53cd UefiPayloadPkg: Fix the non-ascii character in UniversalPayloadEntry.c
  a7ddc7847c RedfishPkg/JsonLib: Add more JsonLib functions
  5963ce5d28 MdePkg: Add ACPI 6.4 header file
  4d7137f261 MdePkg: Increment FADT version
  d910e83299 MdePkg: Rename SBSA Generic Watchdog to Arm Generic Watchdog
  ad3dea9861 MdePkg: Update PMTT to ACPI 6.4
  ced4cb7609 MdePkg: Add SPA Location Cookie field to SPA Range structure
  c82d6dd4a3 MdePkg: Remove DPPT table
  357383bc4f MdePkg: Add flags and MinTransferSize to Generic Initiator
  7b17bcd9a0 MdePkg: Add 'Type 5' PCC structure
  0938f9235c MdePkg: Add Multiprocessor Wakeup structure
  75c4a8e10d MdePkg: Add the Platform Health Assessment Table (PHAT)
  1803757a9b MdePkg: Add Secure Access Components in the SDEV table
  605c4a1ff2 MdePkg: Add Cache ID to PPTT
  3d359ff905 MdePkg: Fix broken coding style in Acpi64.h
  7311e96417 RedfishPkg/RefishCrtLib: Public RefishCrtLib
  03e19e6bc8 ArmPkg/IndustryStandard: 32b/64b agnostic FF-A, Mm SVC and Std SMC IDs
  aee0098faf ArmPkg: prepare 32bit ARM build of StandaloneMmPkg
  ca1773878d GenFv: Arm: support images entered in Thumb mode
  b7f0226a46 StandaloneMmPkg: fix pointer/int casts against 32bit architectures
  a776bbabd9 StandaloneMmPkg: build for 32bit arm machines
  ac826886c9 MdeModulePkg/UefiSortLib:Add UefiSortLib unit test
  6fdd1c13a7 MdeModulePkg PCD: Reinstall PCD service PPIS when memory available
  ef56f55d19 EmbeddedPkg/NonCoherentDmaLib: Avoid dereferencing unset Map field
  8dd4fc5be6 UefiCpuPkg/CpuCacheInfoLib: Correct logical for identifying cache type
  7b4a99be8a CryptoPkg: BaseCryptLib fix incorrect param order
  - Removed patches which are merged to mainline:
  ovmf-bsc1186151-fix-iscsi-overflows.patch
  ovmf-xen-relocate-shared_info_page-map.patch
  - Updated patches
  ovmf-fix-xen-s3-detection.patch -&gt; ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
  ovmf-xen-add-qemu-kernel-loader-fs.patch -&gt; ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch
  - Added patches
  ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch</changelog>
  <changelog author="jlee@suse.com" date="1634904000">- Removed edk2-stable202105.tar.gz because we updated to edk2-stable202108</changelog>
  <changelog author="jlee@suse.com" date="1635249600">- Removed patches which are merged to mainline:
    ovmf-bsc1186151-fix-iscsi-overflows.patch
    ovmf-xen-relocate-shared_info_page-map.patch
- Removed patches because replaced:
    ovmf-fix-xen-s3-detection.patch -&gt; ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
    ovmf-xen-add-qemu-kernel-loader-fs.patch -&gt; ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1636372800">- Update rpmlintrc (fixes aarch64 build)</changelog>
  <changelog author="jlee@suse.com" date="1638532800">- Merge the difference from SLE for pushing back to SLE15-SP4
  - Add/Update 50-xen-hvm-x86_64.json in descriptors.tar.xz
  - Add the json descriptor for xen-hvm (bsc#1180050)
  - Add "nvram-template" and change the firmware file to
  ovmf-x86_64-ms-4m.bin (bsc#1180050, bsc#1181264)
  - The following patches in SLE are already in edk2-edk2-stable202108
    in factory, so they will be removed from 15-SP4
  - ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
    the potential NULL dereference in AuthenticodeVerify()
    (bsc#1177789, CVE-2019-14584)
  - 26442d11e620a9	edk2-stable202011~124
  - ovmf-bsc1180079-amd-sev-es-mitigation.patch to mitigate the
  potential AMD SEV-ES security issues
  (bsc#1180079)
  - a91b700e385e74	edk2-stable202102~181
  - ovmf-jscSLE-16075-SEV-ES-use-physical-address.patch as the
  follow-up patch for SEV-ES to fix the flash writing
  (jsc#SLE-16075)
  - 3a3501862f7309	edk2-stable202102~105
  - ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption
  (bsc#1183578, CVE-2021-28211)
  - e7bd0dd26db7e5	edk2-stable202011~7
  - ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion
  (bsc#1183579, CVE-2021-28210)
  - b9bdfc72853fe9	edk2-stable202011~9
  - Add ovmf-bsc1186151-fix-iscsi-overflows.patch to fix the possible
  overflows in IScsiDxe
  (bsc#1186151)
  - 83761337ec91fb	edk2-stable202108-rc0~171</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1638792000">- cross-i386-binutils and cross-i386-gcc have been dropped from
  Factory, so use only cross-x86_64-* - boo#1193424</changelog>
  <changelog author="jlee@suse.com" date="1638964800">- For preparing push to SLE15-SP4, add more notes:
  - Drop upstreamed ovmf-jscSLE-16075-SEV-ES-fixes.patch from 15-SP4
  - All patches in the above big patch are in edk2-stable202011
  - Some changes in ovmf.spec file of 15-SP4:
  - brotli-v1.0.7-17-g666c328-c.tar.xz and "add brotli" section
  be removed because ovmf-disable-brotli.patch.
  - Using %{_prefix} instead of /usr hard code.
  - Redundant %defattr(-,root,root) are removed.
  - BuildRoot be removed because factory doesn't have it.
  - Sync some differences in the change log between 15-SP3 with openSUSE
    TW since "Wed Jan 24 06:31:21 UTC 2018":
  - Add TLS and IPv6 supports for ArmVirtQemu.
  - ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  - already in edk2-stable202008
  - Drop the build requirement of python2</changelog>
  <changelog author="jlee@suse.com" date="1640088000">- Update to edk2-stable202111
  - Features (https://github.com/tianocore/edk2/releases):
  Add SSDT CPU topology generator
  Support ACPI 6.4 in GTDT parser and generator
  Support ACPI 6.4 in DynamicTables FADT parser
  Support ACPI 6.4 in Acpiview PCCT parser
  Support ACPI 6.4 in Acpiview HMAT parser
  Add support for the microvm machine type (qemu)
  OVMF/ArmVirt: add support for virtio-mmio 1.0
  IntelFsp2Pkg: adopt FSP 2.3 specification
  UefiCpuPkg VTF0 X64: Build page tables using Linear-Address Translation to a 1-GByte Page
  Enable wildcard host name matching in HTTPS/TLS implementation
  Add QuickSort function into BaseLib
  Add SMM NV variable support in universal UEFI payload
  Add TDVF to OvmfPkg
  Make package and platform builds reproducible across source format changes
  - Patches (git log --oneline --reverse edk2-stable202108~..edk2-stable202111):
  7b4a99be8a CryptoPkg: BaseCryptLib fix incorrect param order
  82f7e315d6 MdeModulePkg/PeiCore: Remove MigrateSecModulesInFv()
  8b15024dc7 Maintainers: Add kraxel as Reviewer to ArmVirtPkg and OvmfPkg
  80e67af9af OvmfPkg: introduce a common work area
  ab77b6031b OvmfPkg/ResetVector: update SEV support to use new work area format
  b9af5037b2 OvmfPkg/ResetVector: move the GHCB page setup in AmdSev.asm
  a82bad9730 ArmPkg/GicV3Dxe: Don't signal EOI on arbitrary interrupts
  94e465e5cb OvmfPkg/Virtio10: Add virtio-mmio 1.0 defines
  08293e43da OvmfPkg/VirtioMmioDeviceLib: Add virtio 1.0 detection.
  212a2b9bb8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Fix SetPageSize.
  537a724421 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Fix SetQueueAddress
  6a3e9576b8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Add default QueueNum
  ae12188cf8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Adapt feature bit handling
  77d5fa8024 OvmfPkg/VirtioMmioDeviceLib: enable virtio 1.0
  b04453d36b MdeModulePkg/EbcDxe: Mitigate memcpy intrinsics
  dc995ce906 MdeModulePkg: Add BootDiscoveryPolicyOld variable.
  443300be46 MdePkg:Update IndustryStandard/Nvme.h with Nvme amdin controller data
  0f11537548 MdeModulePkg:Increase Nvme capacity display
  cae735f613 ArmPkg: Enable boot discovery policy for ARM package.
  cb0d24637d OvmfPkg/OvmfXen: set PcdAcpiS3Enable at initialization
  28152333bc OvmfPkg/LockBoxLib: use PcdAcpiS3Enable to detect S3 support
  52e2dabc0f OvmfPkg/PlatformBootManagerLib: use PcdAcpiS3Enable to detect S3 support
  5b5f10d746 OvmfPkg/SmmControl2Dxe: use PcdAcpiS3Enable to detect S3 support
  9f3eda177a OvmfPkg/OvmfXen: add QemuKernelLoaderFsDxe
  f0fe55bca4 UefiPayloadPkg: Fix the build error when enable Core ci for UefiPayloadPkg
  5d34cc49d5 UefiCpuPkg/PiSmmCpuDxeSmm: Update mPatchCetSupported set condition
  cdda3f74a1 UefiPayloadPkg/UefiPayloadEntry: Fix memory corruption
  3b3f882288 MdeModulePkg/PiSmmCore: Drop deprecated image profiling commands
  b170806518 UefiCpuPkg: Clean up save state boundary checks and comments.
  12e33dca4c IntelFsp2Pkg: Support Config File and Binary delta comparison
  63fddc98e0 UefiPayloadPkg: Create .yaml file in UefiPayloadPkg
  e3ee8c8dbd .azurepipelines: Add UefiPayloadPkg in gate-build-job.yml and CISetting.py
  b6bc203375 MdeModulePkg/HiiDatabaseDxe:remove dead code block
  c5e805ffe1 MdeModulePkg: Fix typo of "memory" in RamDiskDxe debug message
  81d71fb86e Maintainers.txt: Update maintainer/reviewer roles in MdeModulePkg
  edf8bc6d24 SecurityPkg/MemoryOverwriteControl: Add missing argument to DEBUG print
  4473834e7d OvmfPkg/OvmfXen: Fix build with QemuKernelLoaderFsDxe
  a7cf2c5664 RedfishPkg: Fix various typos
  851785ea67 UefiPayloadPkg: Include more modules in UefiPayloadPkg.
  d248516b3a UefiPayloadPkg: Include Network modules in UefiPayloadPkg.
  6c7d6d4a5e UefiCpuPkg: ResetVector Tool Support for Python 3
  cf7c650592 UefiCpuPkg: ResetVector Tool additional debug prints
  d96df7e993 UefiPayloadPkg: Fix the bug in dump guid HOB info functions
  dcd3d63f4f UefiPayloadPkg: Dump hob info from gEdkiiBootManagerMenuFileGuid
  610d8073f2 SecurityPkg/TPM: Import PeiDxeTpmPlatformHierarchyLib.c from edk2-platforms
  4d5f39cd22 SecurityPkg/TPM: Fix bugs in imported PeiDxeTpmPlatformHierarchyLib
  ebbc8ab2cd SecrutiyPkg/Tcg: Import Tcg2PlatformDxe from edk2-platforms
  2906e572c6 SecurityPkg/Tcg: Make Tcg2PlatformDxe buildable and fix style issues
  f108178c56 SecurityPkg: Introduce new PCD PcdRandomizePlatformHierarchy
  a4867dea2a SecurityPkg/Tcg: Import Tcg2PlatformPei from edk2-platforms
  2fa89c8e11 SecurityPkg/Tcg: Make Tcg2PlatformPei buildable and fix style issues
  3b69fcf5f8 SecurityPkg: Add references to header and inf files to SecurityPkg
  6c80564b89 MdeModulePkg/Core/Pei: Fix typo in function descriptions
  6f501a7c9b MdeModulePkg/Core/Pei: Make migrated PEIM message verbose
  c19d18136e MdeModulePkg/Core/Pei: Fix pointer size mismatch in EvacuateTempRam()
  f4e72cf9d6 UefiPayloadPkg: Add script to build UniversalPayload in UefiPayloadPkg
  bda3546c55 UefiPayloadPkg: Fix the warning when building UefiPayloadPkg with IA32+X64
  010753b7e7 UefiCpuPkg: Refactor initialization of CPU features during S3 resume
  89f7ed8b29 UefiCpuPkg: Prevent from re-initializing CPU features during S3 resume
  60d8bb9f28 UefiCpuPkg: VTF0 Linear-Address Translation to a 1-GByte Page till 512GB
  ac6388add4 ArmPkg/ProcessorSubClassDxe: Fix the format of ProcessorId
  e3e47d7963 UefiCpuPkg: SecCoreNative without ResetVector
  542cba73d2 SecurityPkg: Add debug log for indicating IBB verified OBB successfully
  f334c5a41d IntelFsp2WrapperPkg: Make PcdFspModeSelection dynamic
  79019c7a42 OvmfPkg: set a default value for the WorkAreaHeader PCD
  fdeff3fdae EmbeddedPkg: Remove duplicate libfdt.h include
  f2a7e24e38 EmbeddedPkg: AndroidBootImgBoot error handling updates
  c0cd26f43c EmbeddedPkg: Install FDT if UpdateDtb is not present
  7ea7f9c077 EmbeddedPkg: Add LoadFile2 for linux initrd
  d60915b751 UefiPayloadPkg: Add Macro to enable or disable some drivers.
  46b4606ba2 MdeModulePkg/PciBusDxe: Improve the flow of testing support attributes
  f57040b038 MdeModulePkg/BootManagerMenuApp: Limit string drawing within one line
  b0f1b1c5fd MdePkg: Fix DEVICE_SECURITY_EVENT_DATA_HEADER version definition
  cc5a67269e UefiPayloadPkg: Build a HOB from bootloader ACPI table
  dc430ccf3f UefiPayloadPkg: Use dummy constructor for PlatformHookLib
  4a1899dd79 UefiPayloadPkg: Add ".upld_info" in universal payload
  2ea0a0a414 BaseTools: Switch to downloading the ARM compiler from Arm's site
  1ce6ceb75b BaseTools: Switch to downloading the AARCH64 compiler from Arm's site
  c214128a38 BaseTools/GenMake: Use ToolDefinition as fallback option
  259c184c8f BaseTools/build: Set MakefileName
  445c39f757 BaseTools: Remove Makefile/MakefileName fields
  c7d5b046d9 BaseTools: Remove hard-coded strings for target and tools_def
  442e46d3b6 UefiPayloadPkg: Update maximum logic processor to 256
  499c4608b1 OvmfPkg/TPM PPI: Connect default consoles for user interaction
  b8675deaa8 OvmfPkg: Handle TPM 2 physical presence opcodes much earlier
  8ab8fbc016 OvmfPkg: Reference new Tcg2PlatformDxe in the build system for compilation
  bd298d7593 OvmfPkg: Reference new Tcg2PlatformPei in the build system
  f86de75862 MdePkg: MmCommunication: Added definition of MM Communication PPI
  8b4bb94f64 MdePkg: CI YAML: Added new GUID to ignore duplicate list
  9e950cda6a MdeModulePkg: CI YAML: Added new GUID to ignore duplicate list
  2273799677 SecurityPkg: Fix SecureBootDefaultKeysDxe failed to start
  422e5d2f7f UefiPayloadPkg: Remove asm code and sharing libraries
  0875443f7e DynamicTablesPkg: Extract AcpiHelperLib from TableHelperLib
  20775950c6 DynamicTablesPkg: Update TableHelperLib.inf
  1ad5182500 DynamicTablesPkg: Rename single char input parameter
  653113412f DynamicTablesPkg: Add HexFromAscii() to AcpiHelperLib
  72ab552554 DynamicTablesPkg: Add AmlGetEisaIdFromString() to AcpiHelperLib
  96e006b37e DynamicTablesPkg: Add Configuration Manager Object parser
  235ff9fcd1 DynamicTablesPkg: Use %a formatter in AmlDbgPrint
  7a8c037e9e DynamicTablesPkg: Update DynamicTablesPkg.ci.yaml
  691c5f7762 DynamicTablesPkg: Deprecate Crs specific methods in AmlLib
  22873f58c4 DynamicTablesPkg: Rework AmlResourceDataCodegen.c/h
  4cc1458dbe IntelFsp2Pkg: Adopt FSP 2.3 specification.
  c49cb8f30e ArmPkg: SmbiosMiscDxe: Don't populate ExtendedBiosSize when size &lt; 16MB
  282122ec5f ArmVirtPkg/TPM: Add a NULL implementation of TpmPlatformHierarchyLib
  b3685956d2 ArmVirtPkg: Reference new TPM classes in the build system for compilation
  c806b76865 ArmVirtPkg: Disable the TPM2 platform hierarchy
  606340fba3 OvmfPkg/Microvm: copy OvmfPkgX64 files as-is
  4932f05a00 OvmfPkg/Microvm: rename output files, fix includes
  2a49c19b9e OvmfPkg/Microvm: no smm
  60d55c4156 OvmfPkg/Microvm: no secure boot
  0569c52b15 OvmfPkg/Microvm: no tpm
  06fa1f1931 OvmfPkg/Microvm: no sev
  6073bf6cd8 OvmfPkg/Microvm: no csm
  b9dd64b80e OvmfPkg/Microvm: no emulated scsi
  27de86ae41 OvmfPkg/Microvm: use MdePkg/Library/SecPeiDxeTimerLibCpu
  76602f45dc OvmfPkg/Microvm: use XenTimerDxe (lapic timer)
  6a8e9ad24b OvmfPkg/Microvm: PlatformPei/MemDetect tweaks
  8583b57c5c OvmfPkg/Microvm: PlatformPei/Platform memory map tweaks
  bf02d73e74 OvmfPkg/Microvm: PlatformPei/Platform: add id.
  1d3e89f349 OvmfPkg/ResetSystemLib: add driver for microvm
  2c467c9be2 OvmfPkg/Microvm: BdsPlatform: PciAcpiInitialization tweak.
  8456785986 OvmfPkg/Microvm: use PciHostBridgeLibNull
  55f47d2299 OvmfPkg/Microvm: wire up serial console, drop super-io
  862e814de4 OvmfPkg/Microvm: add Maintainers.txt entry
  06a326caf1 DynamicTablesPkg: Update FADT generator to ACPI 6.4
  f09dbf20b9 DynamicTablesPkg: Rename SBSA generic watchdog
  942c9bd357 ShellPkg: Update Acpiview GTDT parser to ACPI 6.4
  80e67bcb23 ShellPkg: Update Acpiview PCCT parser to ACPI 6.4
  b4da6c29f1 ShellPkg: Add Type 5 PCC Subspace Structure parser
  5ece2ad36c MdeModulePkg/Core/Dxe: Add lock protection in CoreLocateHandleBuffer()
  30400318a2 ShellPkg: Update Acpiview HMAT parser to ACPI spec version 6.4
  71c3c9c0c4 DynamicTablesPkg: Remove unnecessary includes
  25cf58a163 DynamicTablesPkg: Add missing parameter check
  bfaf7c8b9e DynamicTablesPkg: Add AddSsdtAcpiHeader()
  28b2df475f DynamicTablesPkg: Add AmlRdSetEndTagChecksum()
  74addfeab6 DynamicTablesPkg: Add AmlSetRdListCheckSum()
  7b2022d39e DynamicTablesPkg: Set EndTag's Checksum if RdList is modified
  2dd7dd3952 DynamicTablesPkg: Clear pointer in node creation fcts
  37bd08176c DynamicTablesPkg: Update error handling for node creation
  6d2777d85f DynamicTablesPkg: Make AmlNodeGetIntegerValue public
  f995f8672b DynamicTablesPkg: AML Code generation for Register()
  9454d1ebcb DynamicTablesPkg: AML Code generation for Resource data EndTag
  1e33479b39 DynamicTablesPkg: AML code generation for a Package
  12e65fd258 DynamicTablesPkg: Helper function to compute package length
  ce15936f2f DynamicTablesPkg: AML code generation for a ResourceTemplate
  de62ccbf4f DynamicTablesPkg: AML code generation for a Method
  e2d7b4950b DynamicTablesPkg: AML code generation to Return a NameString
  3e958e93ce DynamicTablesPkg: AML code generation for a Method returning a NS
  018a962d92 DynamicTablesPkg: AML code generation for a _LPI object
  a5e36ad9bc DynamicTablesPkg: AML code generation to add an _LPI state
  f17ef10e63 DynamicTablesPkg: Add CM_ARM_LPI_INFO object
  769e63999f DynamicTablesPkg: SSDT CPU topology and LPI state generator
  19ee56c4b3 UefiPayloadPkg: Add a macro to select the SecurityStubDxe driver.
  782d018703 MdePkg: Add ProcessorUpgradeSocketLGA4677 from SMBIOS 3.5.0
  ba4ae92234 ShellPkg: Support ProcessorUpgradeSocketLGA4677 from SMBIOS 3.5.0
  f22feb0e3b CryptoPkg/BaseCryptLib: Eliminate extra buffer copy in Pkcs7Verify()
  4225a464c6 MdePkg/BaseLib: Add QuickSort function on BaseLib
  6ed6abd6c1 BaseTools: Change RealPath to AbsPath
  978d428ec3 UefiPayloadPkg: Add PCI root bridge info hob support for SBL
  43b3840873 MdeModulePkg/Sd: Corrections for Extra.uni files
  a7fcab7aa3 MdeModulePkg/Core/Dxe: Acquire a lock when iterating gHandleList
  e40fefafa9 ArmVirtPkg/FdtClintDxe: Move FdtClientDxe to EmbeddedPkg
  fb759b8b73 MdePkg: Add PcdPciIoTranslation PCD
  7d78a86ecf ArmPkg: Use PcdPciIoTranslation PCD from MdePkg
  77e9b3a7c6 ArmVirtPkg/FdtPciPcdProducerLib: Relocate PciPcdProducerLib to OvmfPkg
  d881c6ddf5 ArmVirtPkg/HighMemDxe: Relocate HighMemDxe to OvmfPkg
  47bd85e9f9 OvmfPkg/HighMemDxe: Add RISC-V in the supported arch.
  f8d0501ded ArmVirtPkg/QemuFwCfgLib: Relocate QemuFwCfgLib to OvmfPkg
  26aa241d2f OvmfPkg/QemuFwCfgLibMmio: Add RISC-V arch support
  c6770f4b88 MdePkg: Add PcdPciMmio32(64)Translation PCDs
  9a7509e465 ArmVirtPkg/FdtPciHostBridgeLib: Relocate FdtPciHostBridgeLib to OvmfPkg/Fdt
  b21c6794de OvmfPkg/FdtPciHostBridgeLib: Add RISC-V in the supported arch.
  e0c23cba5e ArmVirtPkg/VirtioFdtDxe: Relocate VirtioFdtDxe to OvmfPkg/Fdt
  f2400e06db BaseTools: add edk2-test repo to SetupGit.py
  785cfd3305 UefiPayloadPkg: Use SECURITY_STUB_ENABLE to control the SecurityStubDxe
  7e43d3e086 ArmPkg/Smbios: Fix max cache size 2 wrong issue
  f10a112f08 UefiPayloadPkg: Fix the build issue for coreboot
  2108698346 StandaloneMmPkg: Support CLANGPDB builds
  11a4af85a4 Ovmfpkg: update Ia32 build to use new work area
  36b561623a OvmfPkg/AmdSev: update the fdf to use new workarea PCD
  91a978ce7e UefiPayloadPkg: Replace MEMROY_ENTRY by MEMORY_ENTRY
  6ef5797447 UefiPayloadPkg: Fix ECC reported issues
  90246a6d9f UefiPayloadPkg: Fix the build failure for non-universal payload
  37a33f02aa UefiCpuPkg: Cpu feature data stored in memory may be migrated
  4fdf843c75 DynamicTablesPkg: Fix unitialized variable use
  6893865b30 DynamicTablesPkg: Fix void pointer arithmetic
  99325a8b65 MdeModulePkg/SortLib: Add QuickSort function on BaseLib
  305fd6bee0 UefiCpuPkg/CpuCacheInfoLib: Add QuickSort function on BaseLib
  2f286930a8 ShellPkg: Parse I/O APIC and x2APIC structure
  bd5ec03d87 NetworkPkg/HttpBootDxe: make file extension check case-insensitive
  6254037223 ArmPkg: Implement PlatformBootManagerLib for LinuxBoot
  f079e9b450 OvmfPkg: Copy Main.asm from UefiCpuPkg to OvmfPkg's ResetVector
  5a2411784b OvmfPkg: Clear WORK_AREA_GUEST_TYPE in Main.asm
  c9ec74a198 OvmfPkg: Add IntelTdxMetadata.asm
  8b76f23534 OvmfPkg: Enable TDX in ResetVector
  87a34ca0cf UefiPayloadPkg: Add a common SmmAccessDxe module
  e7e8ea27d4 UefiPayloadPkg: Add a common SMM control Runtime DXE module
  bed990aae6 UefiPayloadPkg: Add bootloader SMM support module
  1d66480aa4 UefiPayloadPkg: Add SpiFlashLib
  04714cef46 UefiPayloadPkg: Add FlashDeviceLib
  ae8acce8ae UefiPayloadPkg: Add a common FVB SMM module
  242dcfe30f UefiPayloadPkg: Add a SMM dispatch module
  b80c17b62d UefiPayloadPkg: Add SMM support and SMM variable support
  2f6f3329ad FmpDevicePkg/FmpDxe: Use new Variable Lock interface
  9a95d11023 IntelFsp2Pkg/SplitFspBin.py: adopt FSP 2.3 specification.
  bb146ce32d MdePkg Cpuid.h: Define CPUID.(EAX=7,ECX=0):EDX[30]
  1bc232aae3 RedfishPkg: Update link to staging/RedfishClientPkg in Readme.md
  e7663fdd82 UefiPayloadPkg: Remove SystemTableInfo GUID.
  91b772ab62 RedfishPkg: Add more information to Readme.md
  c8594a5311 SecurityPkg/FvReportPei: Remove the ASSERT to allow neither M nor V
  939c2355da IntelFsp2Pkg SplitFspBin.py: Correct file name in file header
  6f9e83f757 NetworkPkg/HttpDxe: Enable wildcard host name matching for HTTP+TLS.
  b258f12889 BaseTools/VrfCompile: Fix uninitialized field from unnamed field
  0f4cdad25b DynamicTablesPkg: Add missing BaseStackCheckLib instance
  e13e53cb2f NetworkPkg/NetworkPkg.dsc: Add RngLib mapping for ARM and RISCV64
  c1f2287635 SecurityPkg/SecurityPkg.dsc: Add missing RngLib for ARM and RISCV64
  b0a03ca4a9 SignedCapsulePkg/SignedCapsulePkg.dsc: Add RngLib mapping
  15e635d1b5 UefiCpuPkg/MtrrLib/UnitTest: Fix 32-bit GCC build issues
  4050c873b5 MdeModulePkg/Variable/RuntimeDxeUnitTest: Fix 32-bit GCC builds
  d79df34beb BaseTools: Fix StructurePcd offset error.
  b5d4a35d90 MdeModulePkg/XhciSched: Fix missing DEBUG arguments
  48452993ad MdePkg/Include: Enhance DebugLib to support reproduce builds
  5948ec3647 MdePkg: Reproduce builds across source format changes
  f331310a10 ArmPkg: Reproduce builds across source format changes
  77dcd03ecf MdeModulePkg: Reproduce builds across source format changes
  45137bca2f NetworkPkg: Reproduce builds across source format changes
  d939a25d41 SecurityPkg: Reproduce builds across source format changes
  fd42dcb1fc OvmfPkg: Reproduce builds across source format changes
  8c1b1fe634 ShellPkg: Add comment that ItemPtr is set after validation
  d6e6337cd6 MdePkg: Fix ACPI memory aggregator/device type mismatch
  c974257821 MdeModulePkg AtaAtapiPassThru: Always do S.M.A.R.T. check if device support
  aab6bb3d32 MdeModulePkg/DxeCapsuleLibFmp: Capsule on Disk file name capsule
  a7b35aae13 MdeModulePkg\UfsBlockIoPei: UFS MMIO address size support both 32/64 bits
  f826b20811 UefiCpuPkg/UefiCpuLib: Add GetCpuFamilyModel and GetCpuSteppingId
  8c8867c5da MdeModulePkg/DxeCapsuleLibFmp: Use new Variable Lock interface
  22c3b5a865 BaseTools: Add authenticated variable store support
  a92559671a OvmfPkg/Xen: Fix VS2019 build issues
  4c495e5e3d OvmfPkg/Bhyve/PlatformPei: Fix VS2019 X64 NOOPT build issue
  466ebdd2e0 MdeModulePkg/FPDT: Lock boot performance table address variable at EndOfDxe
  455b0347a7 UefiCpuPkg/PiSmmCpuDxeSmm: Use SMM Interrupt Shadow Stack
  e1e7306b54 OvmfPkg/Library/ResetSystemLib: Fix Microvm VS2019 NOOPT build issue
  4c7ce0d285 MdeModulePkg AtaAtapiPassThru: Skip the potential NULL pointer access
  bb1bba3d77 NetworkPkg: Fix invalid pointer for DNS response token on error
  - Removed patches which are merged to mainline:
  - ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch to fix the
    S3 detection in ovmf-xen
  - cb0d24637d    edk2-stable202111-rc1~220
  - ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch to add QemuKernelLoaderFsDxe
    to ovmf-xen to load kernel from qemu fw_cfg
  - 9f3eda177a    edk2-stable202111-rc1~216
  - ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch
  - 4473834e7d    edk2-stable202111-rc1~203
  - The edk2-stable202111 includes the following patches for bsc#1192126
    to fix unlimited reset. (bsc#1192126)
    80e67af9af OvmfPkg: introduce a common work area
    ab77b6031b OvmfPkg/ResetVector: update SEV support to use new work area format
    b9af5037b2 OvmfPkg/ResetVector: move the GHCB page setup in AmdSev.asm</changelog>
  <changelog author="jlee@suse.com" date="1640260800">- Removed useless patch files because they are merged to edk2-stable202111
  - ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch
  - ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch
  - ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
- Updated URL to the edk2 repo on github
- Use downloaded edk2-edk2-stable%{version}.tar.gz instead of the URL
  for Source0 because the edk2-edk2-stable202111 tarball is broken
  in tianocore repo which can not pass the "osc service runall download_files"
  testing.
  - We ill change it back to the following setting when upstream fixed tarball:
  Source0:        https://github.com/tianocore/edk2/releases/download/edk2-stable%{version}/edk2-edk2-stable%{version}.tar.gz</changelog>
  <changelog author="jlee@suse.com" date="1641211200">- Modified gdb_uefi.py.in for python3 (bsc#1192126)
  - change 'long' to 'int'
  - using
    print ('
    instead of
    print "</changelog>
  <changelog author="bwiedemann@suse.com" date="1645099200">- Sort file lists for reproducible build results</changelog>
  <changelog author="jlee@suse.com" date="1646913600">- Update to edk2-stable202202
  - Features (https://github.com/tianocore/edk2/releases):
  OvmfPkg Add new target for Cloud Hypervisor
  Add TDVF to OvmfPkg
  Add new APIs to UefiCpuPkg/UefiCpuLib
  Add AMD Secure Nested Paging Support
  Add SSDT PCI generator in DynamicTablesPkg
  Support ACPI 6.4 PPTT changes
  Add FdtHwInfoParser library
  Add DynamicPlatRepo library
  Make package and platform builds reproducible across source format changes
  Add Uncrustify CI Plugin
  Apply uncrustify changes to all package C and H files
  - Patches (git log --oneline --reverse edk2-stable202111~..edk2-stable202202):
  bb1bba3d77 NetworkPkg: Fix invalid pointer for DNS response token on error
  ef9a059cdb EmulatorPkg/Win/Host: Update CC_FLAGS
  69877614fd .pytool/Plugin/EccCheck: Remove RevertCode()
  854462bd34 .pytool/Plugin/EccCheck: Remove temp directory on exception
  3019f1bbab .pytool/Plugin/EccCheck: Add performance optimizations
  99f84ff473 .pytools/Plugin/LicenseCheck: Use temp directory for git diff output
  76a1ce4d5f .azurepipelines/templates: Update max pipeline job time to 2 hours
  365dced2c3 ArmPkg: Update YAML to ignore specific ECC files/errors
  1939fc9569 ArmPlatformPkg: Update YAML to ignore specific ECC files/errors
  c97fee87f0 ArmVirtPkg: Update YAML to ignore specific ECC files/errors
  d5744ecba8 CryptoPkg: Update YAML to ignore specific ECC files/errors
  d7d30e8f21 EmulatorPkg: Update YAML to ignore specific ECC files/errors
  9deb937076 MdeModulePkg: Update YAML to ignore specific ECC files/errors
  df790cd6b3 MdePkg: Update YAML to ignore specific ECC files/errors
  60fa40be45 SecurityPkg: Update YAML to ignore specific ECC files/errors
  9944508e85 ShellPkg: Update YAML to ignore specific ECC files/errors
  c30c40d6c6 StandaloneMmPkg: Update YAML to ignore specific ECC files/errors
  c057347977 UefiPayloadPkg: Update YAML to ignore specific ECC files/errors
  f0f3f5aae7 UnitTestFrameworkPkg: Update YAML to ignore specific ECC files/errors
  dfafa8e453 MdeModulePkg/DxeCorePerformanceLib:Variable Initial
  a4a582e180 ArmPkg: Change use of EFI_D_* to DEBUG_*
  1d2482e1e3 ArmPlatformPkg: Change use of EFI_D_* to DEBUG_*
  c5b3a56e4f ArmVirtPkg: Change use of EFI_D_* to DEBUG_*
  a1878955b2 EmbeddedPkg: Change use of EFI_D_* to DEBUG_*
  9c7da8d804 EmulatorPkg: Change use of EFI_D_* to DEBUG_*
  917e98f3e5 FatPkg: Change use of EFI_D_* to DEBUG_*
  87000d7708 MdeModulePkg: Change use of EFI_D_* to DEBUG_*
  5f289f3ae3 MdePkg: Change use of EFI_D_* to DEBUG_*
  c49ca4a29e NetworkPkg: Change use of EFI_D_* to DEBUG_*
  47719926e8 OvmfPkg: Change use of EFI_D_* to DEBUG_*
  ca56749b0e PcAtChipsetPkg: Change use of EFI_D_* to DEBUG_*
  e905fbb05a SecurityPkg: Change use of EFI_D_* to DEBUG_*
  4a1aee13d8 ShellPkg: Change use of EFI_D_* to DEBUG_*
  586fda4800 SourceLevelDebugPkg: Change use of EFI_D_* to DEBUG_*
  96e1cba5c1 UefiCpuPkg: Change use of EFI_D_* to DEBUG_*
  1871d28eaf ArmPkg: Change OPTIONAL keyword usage style
  2863ba97ca ArmPlatformPkg: Change OPTIONAL keyword usage style
  9607597a74 ArmVirtPkg: Change OPTIONAL keyword usage style
  c8f46130f8 CryptoPkg: Change OPTIONAL keyword usage style
  fe2d81892f DynamicTablesPkg: Change OPTIONAL keyword usage style
  792433088c EmbeddedPkg: Change OPTIONAL keyword usage style
  c69fc80c80 EmulatorPkg: Change OPTIONAL keyword usage style
  9c721071d3 FmpDevicePkg: Change OPTIONAL keyword usage style
  e3917e22e7 MdeModulePkg: Change OPTIONAL keyword usage style
  d0e2f8232a MdePkg: Change OPTIONAL keyword usage style
  8874fa199d NetworkPkg: Change OPTIONAL keyword usage style
  79d49e162e OvmfPkg: Change OPTIONAL keyword usage style
  237295f46d PcAtChipsetPkg: Change OPTIONAL keyword usage style
  dc8fe5ec95 RedfishPkg: Change OPTIONAL keyword usage style
  12710fe93b SecurityPkg: Change OPTIONAL keyword usage style
  9b8507cabe ShellPkg: Change OPTIONAL keyword usage style
  18908e6131 SignedCapsulePkg: Change OPTIONAL keyword usage style
  f9c9215b55 SourceLevelDebugPkg: Change OPTIONAL keyword usage style
  902e76de19 StandaloneMmPkg: Change OPTIONAL keyword usage style
  4ec586b9f6 UefiCpuPkg: Change OPTIONAL keyword usage style
  e35dd32821 UefiPayloadPkg: Change OPTIONAL keyword usage style
  78bc3bdd2a UnitTestFrameworkPkg: Change OPTIONAL keyword usage style
  ea85f0fe13 ArmVirtPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  e3b855f283 CryptoPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  4a9d411662 DynamicTablesPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  db52c7f755 MdeModulePkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  098307e082 MdePkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  ed7f7c9168 NetworkPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  8e875037bf OvmfPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  deba54761a PcAtChipsetPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  f9f4fb2329 SecurityPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  7c2a6033c1 UefiCpuPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  429309e0c6 ArmPkg: Apply uncrustify changes
  40b0b23ed3 ArmPlatformPkg: Apply uncrustify changes
  2b16a4fb91 ArmVirtPkg: Apply uncrustify changes
  7c34237831 CryptoPkg: Apply uncrustify changes
  731c67e1d7 DynamicTablesPkg: Apply uncrustify changes
  e7108d0e96 EmbeddedPkg: Apply uncrustify changes
  a550d468a6 EmulatorPkg: Apply uncrustify changes
  bcdcc4160d FatPkg: Apply uncrustify changes
  45ce0a67bb FmpDevicePkg: Apply uncrustify changes
  111f2228dd IntelFsp2Pkg: Apply uncrustify changes
  7c7184e201 IntelFsp2WrapperPkg: Apply uncrustify changes
  1436aea4d5 MdeModulePkg: Apply uncrustify changes
  2f88bd3a12 MdePkg: Apply uncrustify changes
  d1050b9dff NetworkPkg: Apply uncrustify changes
  ac0a286f4d OvmfPkg: Apply uncrustify changes
  5220bd211d PcAtChipsetPkg: Apply uncrustify changes
  39de741e2d RedfishPkg: Apply uncrustify changes
  c411b485b6 SecurityPkg: Apply uncrustify changes
  47d20b54f9 ShellPkg: Apply uncrustify changes
  b878648967 SignedCapsulePkg: Apply uncrustify changes
  c1e126b119 SourceLevelDebugPkg: Apply uncrustify changes
  91415a36ae StandaloneMmPkg: Apply uncrustify changes
  053e878bfb UefiCpuPkg: Apply uncrustify changes
  e5efcf8be8 UefiPayloadPkg: Apply uncrustify changes
  7c0ad2c338 UnitTestFrameworkPkg: Apply uncrustify changes
  dc453b5164 .pytool/Plugin/UncrustifyCheck: Add Uncrustify CI plugin
  1832eb15aa UefiPayloadPkg/UefiPayloadPkg.fdf: Update DXE Apriori list
  ca78281c25 UefiPayloadPkg/PayloadEntry: Inherit 4/5-level paging from bootloader
  b2f7ee2ded UefiPayloadPkg: Increase SystemMemoryUefiRegionSize from 32M to 64M
  94e0a7bddb UefiPayloadPkg: Add missing Guid gUefiAcpiBoardInfoGuid
  2527723de9 UefiPayloadPkg: Add performance measurement feature
  ffdde9d719 UefiPayloadPkg: Skip ModuleInfo HOB in Payload
  965292135b UefiPayloadPkg/UefiPayloadPkg.dsc:Add BootManagerLib for BootManagerMenuApp
  85a678bf76 UefiPayloadPkg: Add integration instruction for coreboot common error
  7b28310008 BaseTools: Increase the DevicePath length for support more PCD value.
  d25b803e51 MdeModulePkg/Bus/Pci/UhciDxe: Fix the UsbHc memory allocate and free issue
  c82ab4d8c1 BaseTools/VfrCompile: Correct Bit Field Flags for numeric/one of
  2ddacfb6b8 OvmfPkg/SecMain: move SEV specific routines in AmdSev.c
  e2289d19d8 UefiCpuPkg/MpInitLib: move SEV specific routines in AmdSev.c
  2fe8edfe55 OvmfPkg/ResetVector: move clearing GHCB in SecMain
  3053183d41 OvmfPkg/ResetVector: introduce SEV metadata descriptor for VMM use
  707c71a01b OvmfPkg: reserve SNP secrets page
  cca9cd3dd6 OvmfPkg: reserve CPUID page
  f2dc28f0b6 OvmfPkg/ResetVector: pre-validate the data pages used in SEC phase
  34819f2cac OvmfPkg/ResetVector: use SEV-SNP-validated CPUID values
  d9822304ce OvmfPkg/MemEncryptSevLib: add MemEncryptSevSnpEnabled()
  7c3b2892ea OvmfPkg/SecMain: register GHCB gpa for the SEV-SNP guest
  d2b998fbdc OvmfPkg/VmgExitLib: use SEV-SNP-validated CPUID values
  a19b648952 OvmfPkg/PlatformPei: register GHCB gpa for the SEV-SNP guest
  19914edc5a OvmfPkg/AmdSevDxe: do not use extended PCI config space
  ade62c18f4 OvmfPkg/MemEncryptSevLib: add support to validate system RAM
  d706f8fec2 OvmfPkg/MemEncryptSevLib: add function to check the VMPL0
  11b15336f0 OvmfPkg/BaseMemEncryptSevLib: skip the pre-validated system RAM
  d39f8d88ec OvmfPkg/MemEncryptSevLib: add support to validate &gt; 4GB memory in PEI phase
  202fb22be6 OvmfPkg/SecMain: validate the memory used for decompressing Fv
  8eb79b5f4f OvmfPkg/PlatformPei: validate the system RAM when SNP is active
  26210f9436 MdePkg: Define ConfidentialComputingGuestAttr
  504ae26b80 OvmfPkg/PlatformPei: set PcdConfidentialComputingAttr when SEV is active
  b95908e043 UefiCpuPkg/MpInitLib: use PcdConfidentialComputingAttr to check SEV status
  f4e3ce5f53 UefiCpuPkg: add PcdGhcbHypervisorFeatures
  f5a6e1bab5 OvmfPkg/PlatformPei: set the Hypervisor Features PCD
  2c354252be MdePkg/GHCB: increase the GHCB protocol max version
  9c703bc0f1 UefiCpuPkg/MpLib: add support to register GHCB GPA when SEV-SNP is enabled
  d4d7c9ad5f UefiCpuPkg/MpInitLib: use BSP to do extended topology check
  b928eb44d5 OvmfPkg/MemEncryptSevLib: change the page state in the RMP table
  b7b8872031 OvmfPkg/MemEncryptSevLib: skip page state change for Mmio address
  ea3a12d970 OvmfPkg/PlatformPei: mark cpuid and secrets memory reserved in EFI map
  67484aed69 OvmfPkg/AmdSev: expose the SNP reserved pages through configuration table
  06544455d0 UefiCpuPkg/MpInitLib: Use SEV-SNP AP Creation NAE event to launch APs
  0f1d7477c0 OvmfPkg: Remove unused print service driver (PrintDxe)
  30631f0a26 MdePkg: Add missing Cache ID (in)valid define
  0077c22f6d MdePkg: Remove PPTT ID type structure
  a50b65ce22 ShellPkg: Update Acpiview PPTT parser to ACPI 6.4
  8cf2bdfcfb ShellPkg: Add Cache ID to PPTT parser
  b2bbe3df54 DynamicTablesPkg: Remove PPTT ID structure from ACPI 6.4 generator
  e139829dd6 DynamicTablesPkg: Update PPTT generator to ACPI 6.4
  e81a81e584 DynamicTablesPkg: Add CacheId to PPTT generator
  9afcd48a94 OvmfPkg: Handle Cloud Hypervisor host bridge
  2ccefa32a6 OvmfPkg: Create global entry point for SMBIOS parsing
  d8ef774346 OvmfPkg: Retrieve SMBIOS from Cloud Hypervisor
  66bce05f6d OvmfPkg: Generalize AcpiPlatformDxe
  7594c5bfe2 OvmfPkg: Install ACPI tables for Cloud Hypervisor
  f6df289a1c OvmfPkg/OvmfXen: Fix Xen build
  2b20a34fd5 OvmfPkg-EmuVariableFvbRuntimeDxe: Support Access To Memory Above 4G
  d5efc875ef MdePkg: Introduce CcMeasurementProtocol for CC Guest firmware
  a124cd4ef9 SecurityPkg: Support CcMeasurementProtocol in DxeTpm2MeasureBootLib
  8c06c53b58 SecurityPkg: Support CcMeasurementProtocol in DxeTpmMeasurementLib
  adf070ff56 OvmfPkg/Microvm: add PcdConfidentialComputingGuestAttr
  2686468c43 OvmfPkg/Bhyve: add MemEncryptSevLib
  61be49e0f7 OvmfPkg/PlatformCI: factor out PlatformBuildLib.py
  21ee379407 OvmfPkg/PlatformCI: add QEMU_SKIP
  64bccda534 OvmfPkg/PlatformCI: add BhyveBuild.py
  04eacd3943 OvmfPkg/PlatformCI: add MicrovmBuild.py
  8b8ae609a7 OvmfPkg/PlatformCI: add AmdSevBuild.py
  2722856a87 OvmfPkg/PlatformCI: dummy grub.efi for AmdSev
  1203eba58e OvmfPkg/PlatformCI: add XenBuild.py
  64ef0dd1d3 OvmfPkg/Microvm/fdt: add device tree support
  79dcaf7054 OvmfPkg/Microvm/fdt: load fdt from fw_cfg
  c802f8935c OvmfPkg/Microvm/fdt: add empty fdt
  2a68abf6ee OvmfPkg/Microvm/virtio: add virtio-mmio support
  e07d27e24d OvmfPkg/Microvm: add README
  7f1861be2b DynamicTablesPkg: AML Code generation for memory ranges
  0e7147fe75 DynamicTablesPkg: AML Code generation to create a named Package()
  fd5fc4bbb7 DynamicTablesPkg: AML Code generation to create a named ResourceTemplate()
  b2b8def4e3 DynamicTablesPkg: AML Code generation to add _PRT entries
  69ddfee1c3 DynamicTablesPkg: Add AmlAttachNode()
  ce306e48eb DynamicTablesPkg: Add Pci related objects
  e35a746cf5 DynamicTablesPkg: SSDT Pci express generator
  ec37fd9c1f DynamicTablesPkg: Fix multiple objects parsing
  557dede8a6 OvmfPkg/PlatformPei: ScanOrAdd64BitE820Ram improvements
  759e3c6d21 OvmfPkg/PlatformPei: prefer etc/e820 for memory detection
  41d8bb3038 OvmfPkg/PlatformPei: stop using cmos for memory detection
  7a6e6ae933 EmulatorPkg: Update lldbefi.py to work with current lldb which uses python3
  4d30352445 ArmPkg: Add SMC helper functions
  c039fa7ff0 ArmPkg: Update SMC calls to use the new ArmCallSmc0/1/2/3 functions
  90ad4b3b34 DynamicTablesPkg: Definition for HwInfoParser interface
  d59c5a20f8 DynamicTablesPkg: FdtHwInfoParser: CM Object descriptor helper
  5d8b5d171c DynamicTablesPkg: FdtHwInfoParser: Add FDT utility functions
  8d2691c3d5 DynamicTablesPkg: FdtHwInfoParser: Add Boot Arch parser
  3ebe1ff5c9 DynamicTablesPkg: FdtHwInfoParser: Generic Timer Parser
  51941f7558 DynamicTablesPkg: FdtHwInfoParser: Add Serial port parser
  e366a41ef0 DynamicTablesPkg: FdtHwInfoParser: Add GICC parser
  0fa1217726 DynamicTablesPkg: FdtHwInfoParser: Add GICD parser
  b04cf355a0 DynamicTablesPkg: FdtHwInfoParser: Add MSI Frame parser
  d250d408cf DynamicTablesPkg: FdtHwInfoParser: Add ITS parser
  7b6c8b30a5 DynamicTablesPkg: FdtHwInfoParser: Add GICR parser
  26bf034a59 DynamicTablesPkg: FdtHwInfoParser: Add GIC dispatcher
  c67bf628c8 DynamicTablesPkg: FdtHwInfoParser: Add PCI config parser
  deb01dfd7f DynamicTablesPkg: Add FdtHwInfoParser library
  9006967c8d DynamicTablesPkg: Handle 16550_WITH_GAS id
  b2d0ed20fd DynamicTablesPkg: Definition for DynamicPlatRepoLib interface
  2e2db65e39 DynamicTablesPkg: DynamicPlatRepo: Add TokenGenerator
  740e3bb634 DynamicTablesPkg: DynamicPlatRepo: Add TokenFixer
  5fe5b6f94f DynamicTablesPkg: DynamicPlatRepo: Add TokenMapper
  38f6d78c3b DynamicTablesPkg: Add DynamicPlatRepo library
  f14fff5135 StandaloneMmPkg/FvLib: Support large file with EFI_FFS_FILE_HEADER2.
  3a72ec71cd OvmfPkg: remove unused TPM options from MicrovmX64.dsc
  b47575801e OvmfPkg: move tcg configuration to dsc and fdf include files
  5711ff4d0b OvmfPkg: drop TPM_CONFIG_ENABLE
  b819388772 OvmfPkg: create Tcg12ConfigPei.inf
  4de8d61bce OvmfPkg: rework TPM configuration
  e6ea1464a8 OvmfPkg/PlatformPei: Revert "stop using cmos for memory detection"
  a6c0418651 ArmPkg/SmbiosMiscDxe: Remove duplicate HII string definition
  45e3842970 ArmPkg/SmbiosMiscDxe: Get full SMBIOS strings from OemMiscLib
  b451c69088 ArmPkg/ProcessorSubClassDxe: Get serial and part number from OemMiscLib
  8ed8568922 SecurityPkg: Debug code to audit BIOS TPM extend operations
  195f011973 SecurityPkg: Reallocate TPM Active PCRs based on platform support
  ab5ab2f603 SecurityPkg: TPM must go to Idle state on CRB command completion
  c63a10ecb7 EmbeddedPkg/AcpiLib: Add more helper functions
  f129b1f06f OvmfPkg/Bhyve: fix tls-enabled build
  ee1f8262b8 OvmfPkg: Call PlatformInitializeConsole for GPU passthrough case
  de9e5b7dc7 IntelFsp2WrapperPkg : FSPM/S UPD data address based on Build Type
  9ec2cc1f31 IntelFsp2WrapperPkg : Remove EFIAPI from local functions.
  ae8272ef78 MdeModulePkg/UsbBusDxe: fix NOOPT build error
  15c596aeeb OvmfPkg: Bhyve: Delete unused AcpiTables/Ssdt.asl file
  6612ff8561 UefiCpuPkg: Extend measurement of microcode patches to TPM
  e910f076ad BaseTools: Fix the bug of --cmd-len build option
  7935be0fbd IntelFsp2Pkg/FspSecCore: ExtendedImageRevision was not printed.
  c095122d4b MdeModulePkg/PciBusDxe: Enumerator to check for RCiEP before looking for RP
  d463c56ddd MdeModulePkg: Replace with UFS_UNIT_DESC to fix timeout problem
  45920941d9 MdeModulePkg: Refactoring UFS DME request and fix timing problem
  13d9e8ec98 MdeModulePkg: Put off UFS HCS.DP checking to fix timing problem
  079a58276b OvmfPkg/AmdSev/SecretPei: Mark SEV launch secret area as reserved
  9dd14fc91c MdePkg: Add registers of boot partition feature
  14a731096d UnitTestFrameworkPkg: CI YAML: Grant cmockery spell check exception
  6062002bd5 MdeModulePkg/PartitionDxe: Add break to handle invalid LBA0 in MBR
  7438a85bf1 BaseTools: Fix wrong variable header size
  c712ce2bb1 OvmfPkg/CloudHv: Add new target for Cloud Hypervisor
  a2da72b2ca OvmfPkg/CloudHv: Replace legacy 8254 PIT with local APIC timer
  6ecdda71fe OvmfPkg/CloudHv: Connect serial console
  1552050ce7 OvmfPkg/CloudHv: Remove legacy 8259 PIC support
  fdcea7ff6f OvmfPkg/CloudHv: Remove Q35 specifics
  71082d3d1b OvmfPkg/CloudHv: Reduce dependency on QemuFwCfg
  196be601f9 OvmfPkg/CloudHv: Remove video support
  7b6cbe0a81 OvmfPkg/CloudHv: Remove USB support
  e73d1bf96a OvmfPkg/CloudHv: Remove CSM support
  b66056ef21 OvmfPkg/CloudHv: add Maintainers.txt entry
  5302bd81d9 OvmfPkg: Add CloudHvX64 to the CI
  59c48c9314 UefiPayloadPkg: Change the user interface name of the Uiapp
  5801910013 UefiPayloadPkg: Not use BaseCpuTimerLib by default.
  772c5bb8dc FmpDevicePkg/FmpDxe: Update FmpDeviceCheckImageWithStatus() handling
  7709988dd8 RedfishPkg/RedfishRestExDxe:Simplify status check
  21320ef669 MdeModulePkg/Variable: Make only EFI_VARIABLE_NON_VOLATILE invalid
  7e5c603cba MdeModulePkg/SdMmcPciHcDxe: Robust improvements for SD card 1.8V switch
  ee67067f17 MdeModulePkg: VariableSmmRuntimeDxe: Fix Variable Policy Message Length
  5b39832e18 MdePkg: MmCommunication2: Update MM communicate2 function description
  ce37f45955 ArmPkg: MmCommunicationDxe: MM communicate function argument attributes
  541a077bd1 ArmPkg: MmCommunicationDxe: Update MM communicate `CommBuffer**` checks
  1aa1ec4574 ArmPkg: MmCommunicationDxe: Update MM communicate `CommSize` check
  8cc5590eab ArmPkg: MmCommunicationDxe: Update MM communicate `MessageLength` check
  6777e67383 EmbeddedPkg: Fix a build error in FwVol.c in X64 arch
  a867f3a704 UefiPayloadPkg: Use BaseCpuTimerLib for Universal Payload by default
  f4b7b473b4 MdeModulePkg/UefiBootManagerLib: Convert BmLoadOption to Variable Policy
  76b3d45b75 ShellPkg: Add the missing VariablePolicyHelperLib in ShellPkg.dsc
  8542fc5f95 NetworkPkg: Add the missing VariablePolicyHelperLib in NetworkPkg.dsc
  ae35314e7b Maintainers.txt: Add Sami Mujawar as reviewer for ArmPkg
  862ea6e836 OvmfPkg: change qemu default resolution to 1280x800
  e95b44c90e ArmVirtPkg: change qemu default resolution to 1280x800
  929804b172 OvmfPkg: add PcdVideoResolutionSource
  7f25ddbc03 OvmfPkg/QemuVideoDxe: simplify InitializeBochsGraphicsMode
  336da55ca8 OvmfPkg/QemuVideoDxe: drop QEMU_VIDEO_BOCHS_MODES-&gt;ColorDepth
  55c05427b9 OvmfPkg/QemuVideoDxe: factor out QemuVideoBochsAddMode
  49a2d8cbf5 OvmfPkg/QemuVideoDxe: parse edid blob, detect display resolution
  ba79becd55 OvmfPkg/BaseCachingPciExpressLib: Migrate BaseCachingPciExpressLib
  103fa647d1 ArmPkg: Replace CoreId and ClusterId with Mpidr in ARM_CORE_INFO struct
  742dafd2cc DynamicTablesPkg: Print specifier macro for CM_OBJECT_ID
  13136cc311 DynamicTablesPkg: FdtHwInfoParserLib: Parse Pmu info
  5751d60821 DynamicTablesPkg: AmlLib: AmlAddPrtEntry() to handle GSI
  5816bd3eab DynamicTablesPkg: AcpiSsdtPcieLibArm: Remove link device generation
  dc1118fa0d ArmVirtPkg: Add cspell exceptions
  0dbd356983 ArmVirtPkg/Kvmtool: Add DSDT ACPI table
  312ef7a0a4 ArmVirtPkg/Kvmtool: Add Configuration Manager
  17a02163bd ArmVirtPkg/Kvmtool: Enable ACPI support
  5b3c682d91 ArmVirtPkg/Kvmtool: Enable Acpiview
  017564d637 ArmPkg/ArmMmuLib AARCH64: avoid EL0 accessible mappings
  45b1612659 DynamicTablesPkg: Add Memory32Fixed function
  007a95055b DynamicTablesPkg: Remove redundant cast in AmlCodeGenReturn
  33189f0527 DynamicTablesPkg: Add AmlCodeGenMethodRetInteger function
  a4b7aa362d MdeModulePkg/Bus/Pci/PciBusDxe: Support platform PCI ROM override
  6fb09da89f ShellPkg: Fix incorrect PPTT FlagName dereference
  c09dbc92e9 BaseTools/Conf: Add new macro for customizing dll file reduction.
  d4ac53aa91 BaseTools: Fix error leg in DscBuildData.py
  f78b937c95 MdeModulePkg/RuntimeDxe: clear mVirtualMapMaxIndex
  96b8b5fd10 MdeModulePkg/UiApp: Fix spelling of 'FRONTPAGE'
  bd676f080a Maintainers.txt: add missing github IDs to OvmfPkf/Fdt reviewers
  1f54eaa725 Maintainers.txt: update email for Leif Lindholm
  b360b0b589 Maintainers.txt: Update email address
  c9b7c6e0cc BaseTools: Update CLANG{35,38}_WARNING_OVERRIDES to ignore unused vars
  42af706dfb BaseTools: Update brotli submodule
  1193aa2dfb MdeModulePkg: update brotli submodule
  85589ddbf6 OvmfPkg/VmgExitLib: Fix uninitialized variable warning with XCODE5
  c28e376edc OvmfPkg/FvbServicesSmm: use the VmgExitLibNull
  8a57673316 ShellPkg: Fix Ping GetTimerPeriod API failure
  b24306f15d NetworkPkg: Fix incorrect unicode string of the AKM/Cipher Suite
- Add amd-sev-es to the following descriptors because James Fehlig
  tested them (bsc#1196879):
    60-ovmf-x86_64.json
    60-ovmf-x86_64-2m.json
    60-ovmf-x86_64-ms.json
    60-ovmf-x86_64-2m-ms.json
- Backported patches in ovmf-bsc1196879-sev-fix.patch for fixing SEV:
    de463163d9 OvmfPkg/AmdSev: reserve snp pages
  63c50d3ff2 OvmfPkg/ResetVector: cache the SEV status MSR value in workarea
  f1d1c337e7 OvmfPkg/BaseMemEncryptLib: use the SEV_STATUS MSR value from workarea</changelog>
  <changelog author="fvogt@suse.com" date="1647345600">- TPM_ENABLE got renamed to TPM2_ENABLE and TPM_CONFIG_ENABLE removed
  (except on ARM for some reason) (boo#1197104)</changelog>
  <changelog author="jlee@suse.com" date="1651406400">- Respin amd-sev and amd-sev-es features
  After more testing, we found that not all descriptors can support
  both amd-sev with amd-sev-es. So we removed all amd-sev and amd-sev-es
  feature tags but only keep them in ovmf-x86_64-2m.json and
  60-ovmf-x86_64.json. (bsc#1198246#c75)</changelog>
  <changelog author="jlee@suse.com" date="1662465600">- Add patches to disable option ROM on sev (bsc#1199156)
  - Backported the following patches:
  - ovmf-MdeModulePkg-Update-PciEnumeratorSupport-to-ignore-O.patch
  cb8349f01a        MdeModulePkg: Update PciEnumeratorSupport to ignore OptionRom if needed
  - ovmf-OvmfPkg-IncompatiblePciDeviceSupportDxe-Ignore-Optio.patch
  c477b2783f        OvmfPkg/IncompatiblePciDeviceSupportDxe: Ignore OptionRom in Td guest
  - ovmf-OvmfPkg-IncompatiblePciDeviceSupportDxe-Refine-the-c.patch
  149ed8e421        OvmfPkg/IncompatiblePciDeviceSupportDxe: Refine the configuration
  - To disable option ROM both on tdx and sev:
  ovmf-bsc1199156-OvmfPkg-IncompatiblePciDeviceSupportDxe-Ignore-Optio.patch</changelog>
  <changelog author="jlee@suse.com" date="1665144000">- Add patches to fix detection issue of NVME controller (bsc#1203825)
  - ovmf-MdeModulePkg-NvmExpressDxe-fix-check-for-Cap.Css.patch
  - ovmf-MdeModulePkg-NvmExpressPei-fix-check-for-NVM-command.patch</changelog>
  <changelog author="jlee@suse.com" date="1681128000">- Add ovmf-Revert-OvmfPkg-OvmfXen-Set-PcdFSBClock.patch to revert
  71cdb91f313380152d7bf38cfeebe76f5b2d39ac patch (bsc#1205613)
  - 71cdb91f313380152d7bf38cfeebe76f5b2d39ac OvmfPkg/OvmfXen: Set PcdFSBClock
  - We are waiting better upsteam patch, revert the issue patch first.
    Then PcdFSBClock will back to fixed variable.
  - Reference: https://edk2.groups.io/g/devel/topic/94891128#96077
  https://bugzilla.tianocore.org/show_bug.cgi?id=4340</changelog>
  <changelog author="jlee@suse.com" date="1683979200">- Add ovmf-SecurityPkg-DxeImageVerificationLib-Check-result-of-.patch
  to check result of GetEfiGlobalVariable2 (CVE-2019-14560, bsc#1174246)</changelog>
  <changelog author="jlee@suse.com" date="1683979201">- Add ovmf-MdeModulePkg-PiSmmCore-SmmEntryPoint-underflow-CVE-2.patch
  for MdeModulePkg/PiSmmCore: SmmEntryPoint underflow (CVE-2021-38578)
  (bsc#1196741)</changelog>
</package>
<package pkgid="e729f9481d939cc35d1664d9d720c457e6a769e1a12f4dea7be7310d02bf6988" name="qemu-ui-opengl" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="15c45c5e29155036bb767100803fc239c11854fff257ebf52f6b09336bb9c300" name="qemu-ui-opengl" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="5dcb3b3783bf96e265d588bc51de6c144adc924bd5466788464ec9b2b55782d6" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="4f3e2b9614b4bc92cd1b08f63d8cd7a6f1cf070bcd0813cc3b315701191665df" name="qemu-ui-opengl" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="5f6bf878b2e567445ee26fc8ff0f30d7a3f75e9f08f982282664f3af56934291" name="qemu-ui-opengl" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="a87e2c027c5a5a4c2563ea273081ba32339a3f7837120d83a68a3c3fe9cf5c52" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="a74b414bcce6f44df4cc07546f2aa8e00f340d387d11e5582c6e2cd785000fa2" name="qemu-ui-spice-core" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="e41771888a3dd322a8b19f55e67bd7a859a61ad510892b8806ee3f6a57c8ce5a" name="qemu-ui-spice-core" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="2b5b4901c5c57ad5f99b85a215e86c2566f8866c449ac909f9ff63dd55fadb57" name="qemu-ui-spice-core" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="224b16ae4fcf1a946ede6ef1c1e39b69e12c956912c527056be4a6e7fdedf3a9" name="qemu-ui-spice-core" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="1236c75a61d541a9b1fae4ea2305259989507c172052ca457313c04d8e95890a" name="qemu-ui-spice-core" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="ad91ff9e66aa25923c4def66f7dd8cfeb7b230871eea0a6b7c12dc3ecf4de62d" name="qemu-ui-spice-core" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="181eaaa509d3c424184b05246e6d14e80cdb3698b9a8ea1515f87b991db3a8f3" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.15.0_0_g2dd4b9b" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="fddb1c76c14b880b0b5d2d17cefe88755dafa2ae54d10233cc2027d9462a0808" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.15.0_0_g2dd4b9b" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="0cc3981f5c8f096559cc0405b76378c42a127cb95fc2693df8c2ef9e7f869be3" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="d739bd6f0155cee5cda8d9d7c0392233bbf13aa23e1540908718b2aa48ac9cff" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="866df6b6a3f56c3b0002d4d4d84f2c66749518a43369911404d8ed61d30ad6e7" name="rdma-core" arch="aarch64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="f16b807df62f93bcc054c7da2c250507b7ade15416101df8ae0ee358909222c2" name="rdma-core" arch="s390x">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="11dc5250b98b494021f112f91da4fc197582635c8478730d691f3f8b4f9e1b23" name="rdma-core" arch="src">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="be4b729835f526168cf7e4b7fe4a654a092cc955a671702c49eb53d92e69ee7c" name="rdma-core" arch="x86_64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="26a00e07db13916a6a5317fe5e33fe15bb29abe4de881c8dbc716ecccbd2aaa8" name="rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1586347200">- Fix verification of DSA2 signatures with libgrcypt [bnc#1165731]
  * new patch: gcryptdsa2.diff</changelog>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
</package>
<package pkgid="5282c79211302576ba5999ca16fce26283430d9e2e1954b84439f53e020b3e20" name="rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1586347200">- Fix verification of DSA2 signatures with libgrcypt [bnc#1165731]
  * new patch: gcryptdsa2.diff</changelog>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
</package>
<package pkgid="fd86090d5968b53c29914077252fc7ccf8b78fef44b00df345fb89b1fe620aaa" name="rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1586347200">- Fix verification of DSA2 signatures with libgrcypt [bnc#1165731]
  * new patch: gcryptdsa2.diff</changelog>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
</package>
<package pkgid="11c10c40a77e3d3032a28cf4e04ad33fbd7c7a2d9ef0dd8e92166bfdf23c9a45" name="rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1586347200">- Fix verification of DSA2 signatures with libgrcypt [bnc#1165731]
  * new patch: gcryptdsa2.diff</changelog>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
</package>
<package pkgid="3a8ce6f2d5c78e29eaf845985aa69500ad71339647a7092f6780966c45599ae7" name="rpm-ndb" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="4e6da2c9120eb6ce035424af6804f1280f9c7201eccb160fedb6e1d1ff1413ad" name="rpm-ndb" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="c1c2f2f4e3afb8ee5e73ee160809edc8e7787741756f933b066d4f24ddc051bf" name="rpm-ndb" arch="src">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="fe254b90ec4a31c8972fe06b6b816c70bde0234bce2863cfea3e5ba28567a567" name="rpm-ndb" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="18be2603c36df17076d01692c17abb849095b7632334938bf4f2da68c50ab26a" name="rt-tests" arch="src">
  <version epoch="0" ver="2.4" rel="150400.3.3.1"/>
  <changelog author="mgalbraith@suse.de" date="1435665600">- Update to 0.89
  This is the last release suitable for SLE11
- Drop legacy/unbuildable backfire/sendme
- Drop legacy SLERT10 scripts
- We now ship virgin source with only hwlatency detect and broken
  legacy code removed.</changelog>
  <changelog author="cdenicolo@suse.com" date="1436356800">-
- license update: GPL-2.0
- please use SPDX  license sytnax.</changelog>
  <changelog author="jcheung@suse.com" date="1436443200">-
- license update: GPL-2.0
- We now use SPDX license sytnax.
-</changelog>
  <changelog author="jcheung@suse.com" date="1436529600">-
- Add the "COPYING" file in the %doc section
-</changelog>
  <changelog author="jcheung@suse.com" date="1452772800">- Apply this version to SLE-12-SP1</changelog>
  <changelog author="jcheung@suse.com" date="1481198400">- Apply this version to SLE-12-SP2</changelog>
  <changelog author="jcheung@suse.com" date="1493121600">- Submit to SLERT12-SP3</changelog>
  <changelog author="jcheung@suse.com" date="1532692800">- Submit to SLERT12 SP4</changelog>
  <changelog author="jcheung@suse.com" date="1532952000">- Update to 1.0
  Fate#323312 - Upgrade rt-tests to v1.0
  cyclictest: stop any tracing after hitting a breaktrace threshold
  rt-tests: Makefile: Assume numa_parse_cpustring_all available
  rt-tests: Add man page for rt-migrate-test
  rt-tests: Update the cyclictest man page
  rt-tests: Add missing option to hwlatdetect man page
  rt-tests: Housekeeping fix some spelling errors.
  rt-tests: hwlat.txt: smidetect renamed to hwlatdetect
  rt-tests: Remove doc/release-checklist.txt
  rt-tests: Makefile - bump version to 1.0</changelog>
  <changelog author="jcheung@suse.com" date="1536840000">- This is initial to SLERT15 SP1 [fate#326547]</changelog>
  <changelog author="mpluskal@suse.com" date="1536840001">- Update to version 1.3
- Cleanup spec file</changelog>
  <changelog author="jengelh@inai.de" date="1536840002">- Fix grammar in description.
- Have some more %make_install.</changelog>
  <changelog author="jcheung@suse.com" date="1592308800">- Update to version 1.6:
  * New feature to get a snapshot of a running instance of cyclictest without stopping it by
    sending SIGUSR2 to the PID and reading a shared memory segment. This is especially useful
    if running cyclictest over a long period of time
  * Add SPDX tags V3
  * Some fixes
- Changes from version 1.5
  * Mostly small clean-ups and bug fixes
- Changes from version 1.4
  * Added a number of new programs to the rt-tests suite
  - queuelat : simulates a network queue checking for latency violations in packet processing.
  - cyclicdeadline : used to test the deadline scheduler (SCHED_DEADLINE)
  - deadline_test : tests the deadline scheduler in a cyclictest manner
  - ssdd : a tracer to do a bunch of PTRACE_SINGLESTEPs
- Add rt-tests-1.6-Makefile.patch</changelog>
  <changelog author="jcheung@suse.com" date="1609848000">- Update to upstream version 1.10 (SLE-12981)
  * rt-tests: queuelat: Remove get_cpuinfo_mhz.sh and old Makefile
  * rt-tests: determine_maximum_mpps.sh: Add a menu to get user settings.
  * rt-numa: Introduce NUMA helpers
  * cyclictest: Only report the first incident
  * Streamline usage and man page
- Add rt-tests-1.10-Makefile.patch and remove  rt-tests-1.6-Makefile.patch
- Cleanup spec file
- Changes from version 1.9
  * signaltest: Only print from the first thread stats when quiet
  * rt-tests: cyclictest: Move ftrace helpers into rt-utils.[ch]
  * pi_stress: limit the number of inversion groups to the number of online cores
  * rt-tests: Install new man page get_cyclictest_snapshot.8
  * rt-tests: Add a man page for get_cyclictest_snapshot
  * rt-tests: ptsematest.8: Update the ptsematest man page
  * rt-tests: improvements to the python style in get_cyclictest_snapshot
  * cyclictest: Fix setaffinity error on large NUMA machines
- Changes from version 1.8
  * cyclictest: Make the affinity mask apply to the main thread too
  * Remove support for compiling without NUMA
  * cyclictest: Only run on runtime affinity and user supplied affinity
  * cyclictest: Only run on available cpus according to the affinity
  * cyclictest: Report all errors from pthread_setaffinity_np
- Changes from version 1.7
  * Add get_cyclictest_snapshot to Makefile
  * Add the get_cyclictest_snapshot.py utility
  * determine_maximum_mpps.sh: Fix quoting and other shell issue
  * queuelat: get_cpuinfo_mhz.sh highest value
  * cyclicdeadline: Add a simple manpage for cyclicdeadline</changelog>
  <changelog author="daniel.wagner@suse.com" date="1624622400">- Update to upstream version 2.0
  * All test programs can output their results in JSON format
  * cyclictest: Allow to specify main thread affinity</changelog>
  <changelog author="daniel.wagner@suse.com" date="1625054400">- Update to upstream version 2.1
  * Avoid pagefault at startup which made the first cycle
    in cyclictest measure a huge latency spike.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1627560000">- Enable build on all architectures.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1630411200">- Update to upstream version v2.2
  * signaltest: Fix JSON output latency values for 32bit machines
  * oslat: Don't take trace_threshold into account during preheat
  * sched_deadline: Update HRTICK_DL location
  * Allow static builds by dropping dependency on pthread_getaffinity_np</changelog>
  <changelog author="pvorel@suse.cz" date="1669291200">- Update to upstream version v2.4
  https://lore.kernel.org/linux-rt-users/20220708150017.13462-1-jkacur@redhat.com/
- Update to upstream version v2.3
  https://lore.kernel.org/linux-rt-users/20211210184649.11084-1-jkacur@redhat.com/
- Remove old patch rt-tests-1.10-Makefile.patch, which installed
  src/cyclictest/get_cyclictest_snapshot.8. Upstream guarded it with PYLIB in
  3d1976b ("Makefile: manpages: only add get_cyclictest_snapshot if PYLIB")
  but PYLIB should be defined due BuildRequires:  python3-base
- Backport runtime fixes from upcomming release:
  * 0001-cyclictest-Fix-threads-being-affined-even-when-a-isn.patch
  * 0002-rt-tests-Remove-arbitrary-num-of-threads-limits.patch
  * 0003-rt-tests-hackbench-Add-error-checking-to-connect-and.patch
  * 0004-rt-tests-hwlatdetect-Update-to-integer-division.patch
- Use %autosetup (not having to add -p1 for patches)</changelog>
  <changelog author="mpluskal@suse.com" date="1669377600">- Use sources which are actually published</changelog>
</package>
<package pkgid="350b67b41da5b519d85499a14bec4dae894a68f8d957be130249d1338fc7780d" name="rt-tests" arch="x86_64">
  <version epoch="0" ver="2.4" rel="150400.3.3.1"/>
  <changelog author="mgalbraith@suse.de" date="1435665600">- Update to 0.89
  This is the last release suitable for SLE11
- Drop legacy/unbuildable backfire/sendme
- Drop legacy SLERT10 scripts
- We now ship virgin source with only hwlatency detect and broken
  legacy code removed.</changelog>
  <changelog author="cdenicolo@suse.com" date="1436356800">-
- license update: GPL-2.0
- please use SPDX  license sytnax.</changelog>
  <changelog author="jcheung@suse.com" date="1436443200">-
- license update: GPL-2.0
- We now use SPDX license sytnax.
-</changelog>
  <changelog author="jcheung@suse.com" date="1436529600">-
- Add the "COPYING" file in the %doc section
-</changelog>
  <changelog author="jcheung@suse.com" date="1452772800">- Apply this version to SLE-12-SP1</changelog>
  <changelog author="jcheung@suse.com" date="1481198400">- Apply this version to SLE-12-SP2</changelog>
  <changelog author="jcheung@suse.com" date="1493121600">- Submit to SLERT12-SP3</changelog>
  <changelog author="jcheung@suse.com" date="1532692800">- Submit to SLERT12 SP4</changelog>
  <changelog author="jcheung@suse.com" date="1532952000">- Update to 1.0
  Fate#323312 - Upgrade rt-tests to v1.0
  cyclictest: stop any tracing after hitting a breaktrace threshold
  rt-tests: Makefile: Assume numa_parse_cpustring_all available
  rt-tests: Add man page for rt-migrate-test
  rt-tests: Update the cyclictest man page
  rt-tests: Add missing option to hwlatdetect man page
  rt-tests: Housekeeping fix some spelling errors.
  rt-tests: hwlat.txt: smidetect renamed to hwlatdetect
  rt-tests: Remove doc/release-checklist.txt
  rt-tests: Makefile - bump version to 1.0</changelog>
  <changelog author="jcheung@suse.com" date="1536840000">- This is initial to SLERT15 SP1 [fate#326547]</changelog>
  <changelog author="mpluskal@suse.com" date="1536840001">- Update to version 1.3
- Cleanup spec file</changelog>
  <changelog author="jengelh@inai.de" date="1536840002">- Fix grammar in description.
- Have some more %make_install.</changelog>
  <changelog author="jcheung@suse.com" date="1592308800">- Update to version 1.6:
  * New feature to get a snapshot of a running instance of cyclictest without stopping it by
    sending SIGUSR2 to the PID and reading a shared memory segment. This is especially useful
    if running cyclictest over a long period of time
  * Add SPDX tags V3
  * Some fixes
- Changes from version 1.5
  * Mostly small clean-ups and bug fixes
- Changes from version 1.4
  * Added a number of new programs to the rt-tests suite
  - queuelat : simulates a network queue checking for latency violations in packet processing.
  - cyclicdeadline : used to test the deadline scheduler (SCHED_DEADLINE)
  - deadline_test : tests the deadline scheduler in a cyclictest manner
  - ssdd : a tracer to do a bunch of PTRACE_SINGLESTEPs
- Add rt-tests-1.6-Makefile.patch</changelog>
  <changelog author="jcheung@suse.com" date="1609848000">- Update to upstream version 1.10 (SLE-12981)
  * rt-tests: queuelat: Remove get_cpuinfo_mhz.sh and old Makefile
  * rt-tests: determine_maximum_mpps.sh: Add a menu to get user settings.
  * rt-numa: Introduce NUMA helpers
  * cyclictest: Only report the first incident
  * Streamline usage and man page
- Add rt-tests-1.10-Makefile.patch and remove  rt-tests-1.6-Makefile.patch
- Cleanup spec file
- Changes from version 1.9
  * signaltest: Only print from the first thread stats when quiet
  * rt-tests: cyclictest: Move ftrace helpers into rt-utils.[ch]
  * pi_stress: limit the number of inversion groups to the number of online cores
  * rt-tests: Install new man page get_cyclictest_snapshot.8
  * rt-tests: Add a man page for get_cyclictest_snapshot
  * rt-tests: ptsematest.8: Update the ptsematest man page
  * rt-tests: improvements to the python style in get_cyclictest_snapshot
  * cyclictest: Fix setaffinity error on large NUMA machines
- Changes from version 1.8
  * cyclictest: Make the affinity mask apply to the main thread too
  * Remove support for compiling without NUMA
  * cyclictest: Only run on runtime affinity and user supplied affinity
  * cyclictest: Only run on available cpus according to the affinity
  * cyclictest: Report all errors from pthread_setaffinity_np
- Changes from version 1.7
  * Add get_cyclictest_snapshot to Makefile
  * Add the get_cyclictest_snapshot.py utility
  * determine_maximum_mpps.sh: Fix quoting and other shell issue
  * queuelat: get_cpuinfo_mhz.sh highest value
  * cyclicdeadline: Add a simple manpage for cyclicdeadline</changelog>
  <changelog author="daniel.wagner@suse.com" date="1624622400">- Update to upstream version 2.0
  * All test programs can output their results in JSON format
  * cyclictest: Allow to specify main thread affinity</changelog>
  <changelog author="daniel.wagner@suse.com" date="1625054400">- Update to upstream version 2.1
  * Avoid pagefault at startup which made the first cycle
    in cyclictest measure a huge latency spike.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1627560000">- Enable build on all architectures.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1630411200">- Update to upstream version v2.2
  * signaltest: Fix JSON output latency values for 32bit machines
  * oslat: Don't take trace_threshold into account during preheat
  * sched_deadline: Update HRTICK_DL location
  * Allow static builds by dropping dependency on pthread_getaffinity_np</changelog>
  <changelog author="pvorel@suse.cz" date="1669291200">- Update to upstream version v2.4
  https://lore.kernel.org/linux-rt-users/20220708150017.13462-1-jkacur@redhat.com/
- Update to upstream version v2.3
  https://lore.kernel.org/linux-rt-users/20211210184649.11084-1-jkacur@redhat.com/
- Remove old patch rt-tests-1.10-Makefile.patch, which installed
  src/cyclictest/get_cyclictest_snapshot.8. Upstream guarded it with PYLIB in
  3d1976b ("Makefile: manpages: only add get_cyclictest_snapshot if PYLIB")
  but PYLIB should be defined due BuildRequires:  python3-base
- Backport runtime fixes from upcomming release:
  * 0001-cyclictest-Fix-threads-being-affined-even-when-a-isn.patch
  * 0002-rt-tests-Remove-arbitrary-num-of-threads-limits.patch
  * 0003-rt-tests-hackbench-Add-error-checking-to-connect-and.patch
  * 0004-rt-tests-hwlatdetect-Update-to-integer-division.patch
- Use %autosetup (not having to add -p1 for patches)</changelog>
  <changelog author="mpluskal@suse.com" date="1669377600">- Use sources which are actually published</changelog>
</package>
<package pkgid="65574c479d3bd899d6715909026abe8f009046c4639e2fa1f47282d12790872f" name="runc" arch="aarch64">
  <version epoch="0" ver="1.1.5" rel="150000.43.1"/>
  <changelog author="rhafer@suse.com" date="1598616000">- Upgrade to runc v1.0.0~rc92 (bsc#1175821). Upstream changelog is available
  from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  * Updates to CRIU support.
  * Improvements to cgroupfs performance and correctness.</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal. bsc#1181677
- Modernise go building for runc now that it has go.mod.</changelog>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container.
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1168481
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
</package>
<package pkgid="2b8f29e67b441fbb2e69df4b50607eec2bed12d7b3c52eb98300013ac9dafbc2" name="runc" arch="s390x">
  <version epoch="0" ver="1.1.5" rel="150000.43.1"/>
  <changelog author="rhafer@suse.com" date="1598616000">- Upgrade to runc v1.0.0~rc92 (bsc#1175821). Upstream changelog is available
  from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  * Updates to CRIU support.
  * Improvements to cgroupfs performance and correctness.</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal. bsc#1181677
- Modernise go building for runc now that it has go.mod.</changelog>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container.
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1168481
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
</package>
<package pkgid="afbbf810578dd9ef39b9deb4680e861f847afeae4b01dc73dbb5de46bb95ddd5" name="runc" arch="src">
  <version epoch="0" ver="1.1.5" rel="150000.43.1"/>
  <changelog author="rhafer@suse.com" date="1598616000">- Upgrade to runc v1.0.0~rc92 (bsc#1175821). Upstream changelog is available
  from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  * Updates to CRIU support.
  * Improvements to cgroupfs performance and correctness.</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal. bsc#1181677
- Modernise go building for runc now that it has go.mod.</changelog>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container.
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1168481
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
</package>
<package pkgid="7dafc507cee79869aafeaf8d0e08f9714feac3d28655f57b824bc7370467534e" name="runc" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="150000.43.1"/>
  <changelog author="rhafer@suse.com" date="1598616000">- Upgrade to runc v1.0.0~rc92 (bsc#1175821). Upstream changelog is available
  from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  * Updates to CRIU support.
  * Improvements to cgroupfs performance and correctness.</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal. bsc#1181677
- Modernise go building for runc now that it has go.mod.</changelog>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container.
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1168481
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
</package>
<package pkgid="9c1ceb762b5d09532cf21561d4590012c2d1bffe153c6dfb6b710beb875b6a5a" name="runc" arch="aarch64">
  <version epoch="0" ver="1.1.7" rel="150000.46.1"/>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
</package>
<package pkgid="91e79abfd37825829fd6f5a571703dc2f64595c124bcb47914900827a5ce720f" name="runc" arch="s390x">
  <version epoch="0" ver="1.1.7" rel="150000.46.1"/>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
</package>
<package pkgid="c837bfe774fb0059d0b7e7574745a29456ed71ef439f0fd4c8605d008bf9c27b" name="runc" arch="src">
  <version epoch="0" ver="1.1.7" rel="150000.46.1"/>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
</package>
<package pkgid="515437286255b94bc491f2f16216c2992a3d4a33851d06ef6fce19b0d02ab443" name="runc" arch="x86_64">
  <version epoch="0" ver="1.1.7" rel="150000.46.1"/>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
</package>
<package pkgid="4ca8681b504a8d26459cf7752c8e861444eecc81c5ca5a3d344be5d8d638e6d5" name="s390-tools" arch="s390x">
  <version epoch="0" ver="2.19.0" rel="150400.7.21.1"/>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183810)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183810.</changelog>
  <changelog author="mpost@suse.com" date="1620302400">- Modified s390-tools-sles15-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)
- Modified s390-tools-sles15-Implement-f-for-backwards-compability.patch
  to have the correct offset for hunk #2 to apply without warnings.</changelog>
  <changelog author="mpost@suse.com" date="1622030400">- Modified the following patches to correct the output from the
  dasdfmt command when *not* using "YaST mode." (bsc#1182816, bsc#1182820)
  * s390-tools-sles15sp3-Format-devices-in-parallel.patch
  * s390-tools-sles15sp3-Implement-Y-yast_mode.patch</changelog>
  <changelog author="mpost@suse.com" date="1624017600">- Reworked s390-tools-sles15sp2-Implement-Y-yast_mode.patch (yet
  again). If more DASD volumes are to be formatted than are allowed
  by the "maximum number to do in parallel" parameter, dasdfmt
  waits until one of the child processes ends before starting another.
  For YaST to be able to figure out how many cylinders a particular
  DASD volume has, that information has to be output for _all_ of the
  volumes, before any of the child processes are spawned.
  (bsc#1187012)</changelog>
  <changelog author="mpost@suse.com" date="1634558400">- Updated the spec file to correspond to the changes made to the
  location and name of the kernel image in the kernel-zfcpdump
  package (bsc#1189841)
- Did some spec file cleanup based on the recommendations from
  spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1636718400">- Added s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
  Reading /sys/kernel/mm/page_idle/bitmap can cause hang up on
  reading offline pages. (bsc#1192599)
- Added %{version} to the Requires: libekmfweb1 for the
  libekmfweb1-devel package.</changelog>
  <changelog author="mpost@suse.com" date="1641988800">- Upgraded to version 2.19.0 (jsc#SLE-18324)
  * v2.19.0 (2021-11-10)__
    Add new tools / libraries:
  - chreipl-fcp-mpath: New toolset that uses multipath information to change
    the configured FCP re-IPL path on detecting issues with the current path
    Changes of existing tools:
  - dbginfo.sh: Add retry timeout and remove possible blocking "blockdev --report"
  - dbginfo.sh: Collect config- and debug-data for chreipl-fcp-mpath
  - hsci: Add support for multiple MAC addresses
    Bug Fixes:
  - lshwc: Fix compile error for gcc &lt;8.1
  - zdump: Various clean-ups and fixes
  - ziomon: Correct throughput calculation in ziorep_printers
  - zipl: Fix segmentation fault when setting stage3_parms
  * v2.18.0 (2021-10-01)__
    Add new tools:
  - scripts: Add tool for parsing sclp s390dbf logs
  - zdev: Add udev rule helper tool
  - zipl-editenv: Add tool to operate with zIPL environment installed in the boot record
    Changes of existing tools:
  - Makefile: Fix order of build of libraries for parallel builds
  - dbginfo.sh: Add collection in area of timedate, coredump and --check option
  - dbginfo.sh: Add exception on dump2tar for /sys/kernel/mm/page_idle/bitmap
  - dbginfo.sh: Cleanup of outdated sections and general code rework
  - dbginfo.sh: Collect zipl boot menu entries from boot loader specification
  - lszcrypt: Add support for vfio-ap status field
  - lszcrypt: Improved output for deconfig cards and queues
  - lszfcp: Add linkdown case to host marker of extended output
  - zdev: Add auto-config for PCI and crypto devices
  - zdump: Introduce multi-level message logging
  - zipl: Add support for environment block interpretation
  - zkey-cryptsetup: Support LUKS2 volumes with integrity support enabled
    Bug Fixes:
  - hsavmcore: Avoid recompilation of overlay during install step
  - libkmipclient: Fix parsing of hex values for XML and JSON encoding
  - vmur/vmur.cpp: Fix error handling on transfer failure
  - zdump: Lots of smaller fixes across the board
  * v2.17.0 (2021-07-07)__
    Add new tools / libraries:
  - hsavmcore: New utility to make the dump process with kdump more efficient
  - libkmipclient: Add KMIP client shared library
  - libseckey: Add a secure key library
  - lshwc: New tool to extract and list complete counter sets
    Changes of existing tools:
  - genprotimg: Add '--(enable|disable)-pckmo' options
  - genprotimg: Add OpenSSL 3.0 support
  - genprotimg: Change plaintext control flags defaults so PCKMO functions are allowed
  - libutil: Introduce multi-level message logging (util_log)
  - libutil: Introduce util_arch module
  - udev/dasd: Change DASD udev-rule to set none scheduler
  - zdsfs: Add transparent codepage conversion
  - zkey: Add support for KMIP-based key management systems
    Bug Fixes:
  - ttyrun-getty: Avoid conflicts with serial-getty@
  - dbginfo: add /proc/kallsyms - refresh zVM, lscpu - fix WORKARCHIVE handling
  - dbginfo: add KVM data collection for server and guest - fix lszdev
  - genprotimg: Add missing return values in error paths
  - zkey: Fix conversion of CCA DATA keys to CCA CIPHER keys
  - znetconf: avoid conflict with "chzdev -e"
  * v2.16.0 (2021-02-19)__
    Add new tool:
  - hsci: New tool to manage HSCI (HiperSockets Converged Interfaces)
    Changes of existing tools:
  - genprotimg: Add host-key document verification support
  - genprotimg: boot: Make boot loader -march=z900 compatible
  - libekmfweb: Make install directory for shared libraries configurable
  - lsdasd: Add FC Endpoint Security information
  - make: Add address sanitizer support
  - netboot: Add version information to scripts
  - netboot: Bump busybox version in pxelinux.0 build
  - zdev: Add FC Endpoint Security information for DASD devices
  - zdev: Add build option to update initial RAM-disk by default
  - zkey-ekmfweb: Avoid sequence number clash when generating keys
  - zkey/zkey-ekmfweb: Install KMS plugins into configurable location
  - zkey: Add support to store LUKS2 dummy passphrase in key repository
    Bug Fixes:
  - dasdfmt: Fix segfault when an incorrect option is specified
  - genprotimg: Fix several build issues
  - genprotimg: Require argument for 'ramdisk' and 'parmfile' options
  - zcryptstats: Fix handling of partial results with many domains
  - zfcpdbf: Deal with crash 7.2.9 change in caller name formatting
  - zipl/boot: Fix memory use after free in stage2
  - zipl/boot: Fix potential heap overflow in stage2
  - zipl: Fix reading 4k disk's geometry
- Added the following two IBM patches:
  * s390-tools-sles15sp4-chreipl-fcp-mpath-don-t-compress-the-manpage-before-.patch
  * s390-tools-sles15sp4-chreipl-fcp-mpath-remove-shebang-from-chreipl-fcp-mp.patch
- Removed the following obsolete patches
  * s390-tools-sles15sp3-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
  * s390-tools-sles15sp3-libutil-Compare-proc-entries-to-vfstype.patch
  * s390-tools-sles15sp3-01-zdev-Add-FC-Endpoint-Security-information-for-DASD-d.patch
  * s390-tools-sles15sp3-02-lsdasd-Add-FC-Endpoint-Security-information.patch
  * s390-tools-sles15sp3-hsci-Add-new-tool-to-control-HiperSockets-Converged-.patch
  * s390-tools-sles15sp3-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  * s390-tools-sles15sp3-01-genprotimg-abort-if-one-of-the-recursive-targets-is-.patch
  * s390-tools-sles15sp3-02-genprotimg-fix-two-memory-leaks.patch
  * s390-tools-sles15sp3-03-genprotimg-require-argument-for-ramdisk-and-parmfile.patch
  * s390-tools-sles15sp3-04-genprotimg-add-host-key-document-verification-suppor.patch
  * s390-tools-sles15sp3-zkey-Fix-APQN-property-names.patch
  * s390-tools-sles15sp3-zipl-fix-4k-scsi-ipl.patch
  * s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  * s390-tools-sles15sp3-check-return-code-from-util_file_read_l.patch
  * s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
- Removed an obsolete "export ROOT_BUILD_DIR" statement from the spec file.
- Removed unnecessary defattr statements in the files section.</changelog>
  <changelog author="mpost@suse.com" date="1645531200">- Added s390-tools-sles15sp4-zdev-modify-the-lsblk-output-parser-in-lszdev.patch
  for bsc#1196255. Version 2.37+ of util-linux modified the output
  characters of lsblk,which breaks the parser function.
- Added s390-tools-sles15sp4-zdev-Fix-path-resolution-for-multi-mount-point-file-.patch
  for bsc#1196254. Path resolution fails when a device provides
  multiple mount points such as, for example, when using btrfs
  subvolumes, or when mounting the same file system at multiple
  mount points.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files into %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mpost@suse.com" date="1649678400">- Added the following patches for bsc#1198285:
  s390-tools-sles15sp4-01-genprotimg-remove-DigiCert-root-CA-pinning.patch
  s390-tools-sles15sp4-02-genprotimg-check_hostkeydoc-relax-default-issuer-che.patch
  The certificate verification of check_hostkeydoc is too strict and
  doesn't match the checking performed by genprotimg.
- Added the following patch for bsc#1198284:
  s390-tools-sles15sp4-libseckey-Fix-re-enciphering-of-EP11-secure-key.patch
  When re-enciphering the identity key and/or wrapping key of the
  zkey KMIP plugin via 'zkey kms reencipher', the operation
  completes without an error, but the secure keys are left
  un-reenciphered.</changelog>
  <changelog author="mpost@suse.com" date="1649937600">- Updated the cputype script to include the model number of IBM's
  recently announced z16 processor.</changelog>
  <changelog author="mpost@suse.com" date="1651579200">- Added s390-tools-sles15sp4-zdump-fix-segfault-due-to-double-free.patch
  for bsc#1199128. zgetdump --info may lead to a core dump when
  issued for the device node (not a partition) right after
  installing multi-volume dump tool (without taking actual dump).</changelog>
  <changelog author="mpost@suse.com" date="1653566400">- Added s390-tools-sles15sp4-libseckey-Adapt-keymgmt_match-implementation-to-Open.patch
  for bsc#1199649. zkey: KMIP plugin fails to connection to KMIP server
  When a zkey key repository is bound to the KMIP plugin, and the
  connection to the KMIP server is to be configired using command
  'zkey kms configure --kmip-server &lt;server&gt;', it fails to connect
  to the specified KMIP server.</changelog>
  <changelog author="mpost@suse.com" date="1654171200">- Added s390-tools-sles15sp4-genprotimg-boot-disable-Warray-bounds-for-now.patch
  to fix a build failure with gcc12. With gcc12, a "false positive"
  of "array subscript 0 is outside array bounds" is seen in
  genprotimg/boot/stage3a.c (bsc#1200131).</changelog>
  <changelog author="mpost@suse.com" date="1658145600">- Added s390-tools-sles15sp4-hyptop-increase-initial-update-interval.patch
  for bsc#1201412. Initial iteration of hyptop can produce bloated values
  independent from the update delay set by the user.</changelog>
  <changelog author="mpost@suse.com" date="1667476800">- Added s390-tools-sles15sp4-zipl-boot-add-secure-boot-trailer.patch
  for bsc#1204965. New IBM Z firmware requires all signed boot
  images to contain a trailing data block with a specific format.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1672747200">-  Added the following patches for
  KVM: Secure Execution Attestation Userspace Tool (s390-tools)
  (jsc#SLE-24831, jsc#SLE-22854, bsc#1206706)
  * s390-tools-sles15sp4-libpv-New-library-for-PV-tools.patch
  * s390-tools-sles15sp4-pvattest-tools-Add-tool-for-attestation.patch
  * s390-tools-sles15sp4-pvattest-Improve-error-reporting.patch
  * s390-tools-sles15sp4-pvattest-Create-perform-and-verify-attestation-measu.patch
  * s390-tools-sles15sp4-pvattest-Improve-logging.patch
  * s390-tools-sles15sp4-pvattest-Add-more-information-to-verbose-logging.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1674475200">- Added the following patches for bsc#1207175, jsc#SLE-2285, and
  ECO jsc#SLE-24835:
  ap_tools: add ap-check and the ap device type to zdev. This
  feature adds multiple components in support of persistent
  configuration of vfio-ap mediated devices.
  * s390-tools-sles15sp4-01-libutil-add-util_exit_code.patch
  * s390-tools-sles15sp4-02-libutil-Move-some-zdev-file-reading-functions-into-u.patch
  * s390-tools-sles15sp4-03-libutil-Introduce-util_udev.patch
  * s390-tools-sles15sp4-04-libap-Add-library-for-ap-vfio-ap-management-tools.patch
  * s390-tools-sles15sp4-05-ap_tools-Introduce-ap_tools-and-the-ap-check-tool.patch
  * s390-tools-sles15sp4-06-zdev-Introduce-the-ap-device-type.patch
  * s390-tools-sles15sp4-07-libutil-introduce-util_lockfile.patch
  * s390-tools-sles15sp4-08-libutil-add-example-for-util_lockfile.patch
  * s390-tools-sles15sp4-09-libap-use-util_lockfile-and-remove-liblockfile-depen.patch
  * s390-tools-sles15sp4-10-ap_tools-ap-check-use-new-mdevctl-install-location.patch
  * s390-tools-sles15sp4-11-util_lockfile-fix-includes.patch
- Updated the spec file to:
  * Add %dir entries for:
    %{_sysconfdir}/mdevctl.d
    %{_sysconfdir}/mdevctl.d/scripts.d
    %{_sysconfdir}/mdevctl.d/scripts.d/callouts
    %{_prefix}/lib/mdevctl,
    %{_prefix}/lib/mdevctl/scripts.d, and
    %{_prefix}/lib/mdevctl/scripts.d/callouts
    NOTE that these directories do not belong to this package, but
    the mdevctl package has yet to be updated to claim them. So,
    until that happens, we have to temporarily claim ownership of
    them for the s390-tools package to build.
  * Modify the find/grep commands that generate the list of files
    for the package to avoid having files listed more than once.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678449600">- Added the folowing patches (bsc#1209002, and bsc#1209003)
  - Fixes vmcp buffer evalutaion
  * s390-tools-sles15sp4-dbginfo.sh-fix_vmcp_buffer.patch
  - Adds support for kubernetes data collection
  * s390-tools-sles15sp4-dbginfo.sh-add_kubernetes.patch
- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
  when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1684324800">- Applied patches (bsc#1211318)
  * s390-tools-sles15sp4-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp4-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
</package>
<package pkgid="2cc3611ce0c9fa5494193bbb61f0aac1a6be12763c7b30f04121fef9c7a4617c" name="s390-tools" arch="src">
  <version epoch="0" ver="2.19.0" rel="150400.7.21.1"/>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183810)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183810.</changelog>
  <changelog author="mpost@suse.com" date="1620302400">- Modified s390-tools-sles15-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)
- Modified s390-tools-sles15-Implement-f-for-backwards-compability.patch
  to have the correct offset for hunk #2 to apply without warnings.</changelog>
  <changelog author="mpost@suse.com" date="1622030400">- Modified the following patches to correct the output from the
  dasdfmt command when *not* using "YaST mode." (bsc#1182816, bsc#1182820)
  * s390-tools-sles15sp3-Format-devices-in-parallel.patch
  * s390-tools-sles15sp3-Implement-Y-yast_mode.patch</changelog>
  <changelog author="mpost@suse.com" date="1624017600">- Reworked s390-tools-sles15sp2-Implement-Y-yast_mode.patch (yet
  again). If more DASD volumes are to be formatted than are allowed
  by the "maximum number to do in parallel" parameter, dasdfmt
  waits until one of the child processes ends before starting another.
  For YaST to be able to figure out how many cylinders a particular
  DASD volume has, that information has to be output for _all_ of the
  volumes, before any of the child processes are spawned.
  (bsc#1187012)</changelog>
  <changelog author="mpost@suse.com" date="1634558400">- Updated the spec file to correspond to the changes made to the
  location and name of the kernel image in the kernel-zfcpdump
  package (bsc#1189841)
- Did some spec file cleanup based on the recommendations from
  spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1636718400">- Added s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
  Reading /sys/kernel/mm/page_idle/bitmap can cause hang up on
  reading offline pages. (bsc#1192599)
- Added %{version} to the Requires: libekmfweb1 for the
  libekmfweb1-devel package.</changelog>
  <changelog author="mpost@suse.com" date="1641988800">- Upgraded to version 2.19.0 (jsc#SLE-18324)
  * v2.19.0 (2021-11-10)__
    Add new tools / libraries:
  - chreipl-fcp-mpath: New toolset that uses multipath information to change
    the configured FCP re-IPL path on detecting issues with the current path
    Changes of existing tools:
  - dbginfo.sh: Add retry timeout and remove possible blocking "blockdev --report"
  - dbginfo.sh: Collect config- and debug-data for chreipl-fcp-mpath
  - hsci: Add support for multiple MAC addresses
    Bug Fixes:
  - lshwc: Fix compile error for gcc &lt;8.1
  - zdump: Various clean-ups and fixes
  - ziomon: Correct throughput calculation in ziorep_printers
  - zipl: Fix segmentation fault when setting stage3_parms
  * v2.18.0 (2021-10-01)__
    Add new tools:
  - scripts: Add tool for parsing sclp s390dbf logs
  - zdev: Add udev rule helper tool
  - zipl-editenv: Add tool to operate with zIPL environment installed in the boot record
    Changes of existing tools:
  - Makefile: Fix order of build of libraries for parallel builds
  - dbginfo.sh: Add collection in area of timedate, coredump and --check option
  - dbginfo.sh: Add exception on dump2tar for /sys/kernel/mm/page_idle/bitmap
  - dbginfo.sh: Cleanup of outdated sections and general code rework
  - dbginfo.sh: Collect zipl boot menu entries from boot loader specification
  - lszcrypt: Add support for vfio-ap status field
  - lszcrypt: Improved output for deconfig cards and queues
  - lszfcp: Add linkdown case to host marker of extended output
  - zdev: Add auto-config for PCI and crypto devices
  - zdump: Introduce multi-level message logging
  - zipl: Add support for environment block interpretation
  - zkey-cryptsetup: Support LUKS2 volumes with integrity support enabled
    Bug Fixes:
  - hsavmcore: Avoid recompilation of overlay during install step
  - libkmipclient: Fix parsing of hex values for XML and JSON encoding
  - vmur/vmur.cpp: Fix error handling on transfer failure
  - zdump: Lots of smaller fixes across the board
  * v2.17.0 (2021-07-07)__
    Add new tools / libraries:
  - hsavmcore: New utility to make the dump process with kdump more efficient
  - libkmipclient: Add KMIP client shared library
  - libseckey: Add a secure key library
  - lshwc: New tool to extract and list complete counter sets
    Changes of existing tools:
  - genprotimg: Add '--(enable|disable)-pckmo' options
  - genprotimg: Add OpenSSL 3.0 support
  - genprotimg: Change plaintext control flags defaults so PCKMO functions are allowed
  - libutil: Introduce multi-level message logging (util_log)
  - libutil: Introduce util_arch module
  - udev/dasd: Change DASD udev-rule to set none scheduler
  - zdsfs: Add transparent codepage conversion
  - zkey: Add support for KMIP-based key management systems
    Bug Fixes:
  - ttyrun-getty: Avoid conflicts with serial-getty@
  - dbginfo: add /proc/kallsyms - refresh zVM, lscpu - fix WORKARCHIVE handling
  - dbginfo: add KVM data collection for server and guest - fix lszdev
  - genprotimg: Add missing return values in error paths
  - zkey: Fix conversion of CCA DATA keys to CCA CIPHER keys
  - znetconf: avoid conflict with "chzdev -e"
  * v2.16.0 (2021-02-19)__
    Add new tool:
  - hsci: New tool to manage HSCI (HiperSockets Converged Interfaces)
    Changes of existing tools:
  - genprotimg: Add host-key document verification support
  - genprotimg: boot: Make boot loader -march=z900 compatible
  - libekmfweb: Make install directory for shared libraries configurable
  - lsdasd: Add FC Endpoint Security information
  - make: Add address sanitizer support
  - netboot: Add version information to scripts
  - netboot: Bump busybox version in pxelinux.0 build
  - zdev: Add FC Endpoint Security information for DASD devices
  - zdev: Add build option to update initial RAM-disk by default
  - zkey-ekmfweb: Avoid sequence number clash when generating keys
  - zkey/zkey-ekmfweb: Install KMS plugins into configurable location
  - zkey: Add support to store LUKS2 dummy passphrase in key repository
    Bug Fixes:
  - dasdfmt: Fix segfault when an incorrect option is specified
  - genprotimg: Fix several build issues
  - genprotimg: Require argument for 'ramdisk' and 'parmfile' options
  - zcryptstats: Fix handling of partial results with many domains
  - zfcpdbf: Deal with crash 7.2.9 change in caller name formatting
  - zipl/boot: Fix memory use after free in stage2
  - zipl/boot: Fix potential heap overflow in stage2
  - zipl: Fix reading 4k disk's geometry
- Added the following two IBM patches:
  * s390-tools-sles15sp4-chreipl-fcp-mpath-don-t-compress-the-manpage-before-.patch
  * s390-tools-sles15sp4-chreipl-fcp-mpath-remove-shebang-from-chreipl-fcp-mp.patch
- Removed the following obsolete patches
  * s390-tools-sles15sp3-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
  * s390-tools-sles15sp3-libutil-Compare-proc-entries-to-vfstype.patch
  * s390-tools-sles15sp3-01-zdev-Add-FC-Endpoint-Security-information-for-DASD-d.patch
  * s390-tools-sles15sp3-02-lsdasd-Add-FC-Endpoint-Security-information.patch
  * s390-tools-sles15sp3-hsci-Add-new-tool-to-control-HiperSockets-Converged-.patch
  * s390-tools-sles15sp3-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  * s390-tools-sles15sp3-01-genprotimg-abort-if-one-of-the-recursive-targets-is-.patch
  * s390-tools-sles15sp3-02-genprotimg-fix-two-memory-leaks.patch
  * s390-tools-sles15sp3-03-genprotimg-require-argument-for-ramdisk-and-parmfile.patch
  * s390-tools-sles15sp3-04-genprotimg-add-host-key-document-verification-suppor.patch
  * s390-tools-sles15sp3-zkey-Fix-APQN-property-names.patch
  * s390-tools-sles15sp3-zipl-fix-4k-scsi-ipl.patch
  * s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  * s390-tools-sles15sp3-check-return-code-from-util_file_read_l.patch
  * s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
- Removed an obsolete "export ROOT_BUILD_DIR" statement from the spec file.
- Removed unnecessary defattr statements in the files section.</changelog>
  <changelog author="mpost@suse.com" date="1645531200">- Added s390-tools-sles15sp4-zdev-modify-the-lsblk-output-parser-in-lszdev.patch
  for bsc#1196255. Version 2.37+ of util-linux modified the output
  characters of lsblk,which breaks the parser function.
- Added s390-tools-sles15sp4-zdev-Fix-path-resolution-for-multi-mount-point-file-.patch
  for bsc#1196254. Path resolution fails when a device provides
  multiple mount points such as, for example, when using btrfs
  subvolumes, or when mounting the same file system at multiple
  mount points.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files into %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mpost@suse.com" date="1649678400">- Added the following patches for bsc#1198285:
  s390-tools-sles15sp4-01-genprotimg-remove-DigiCert-root-CA-pinning.patch
  s390-tools-sles15sp4-02-genprotimg-check_hostkeydoc-relax-default-issuer-che.patch
  The certificate verification of check_hostkeydoc is too strict and
  doesn't match the checking performed by genprotimg.
- Added the following patch for bsc#1198284:
  s390-tools-sles15sp4-libseckey-Fix-re-enciphering-of-EP11-secure-key.patch
  When re-enciphering the identity key and/or wrapping key of the
  zkey KMIP plugin via 'zkey kms reencipher', the operation
  completes without an error, but the secure keys are left
  un-reenciphered.</changelog>
  <changelog author="mpost@suse.com" date="1649937600">- Updated the cputype script to include the model number of IBM's
  recently announced z16 processor.</changelog>
  <changelog author="mpost@suse.com" date="1651579200">- Added s390-tools-sles15sp4-zdump-fix-segfault-due-to-double-free.patch
  for bsc#1199128. zgetdump --info may lead to a core dump when
  issued for the device node (not a partition) right after
  installing multi-volume dump tool (without taking actual dump).</changelog>
  <changelog author="mpost@suse.com" date="1653566400">- Added s390-tools-sles15sp4-libseckey-Adapt-keymgmt_match-implementation-to-Open.patch
  for bsc#1199649. zkey: KMIP plugin fails to connection to KMIP server
  When a zkey key repository is bound to the KMIP plugin, and the
  connection to the KMIP server is to be configired using command
  'zkey kms configure --kmip-server &lt;server&gt;', it fails to connect
  to the specified KMIP server.</changelog>
  <changelog author="mpost@suse.com" date="1654171200">- Added s390-tools-sles15sp4-genprotimg-boot-disable-Warray-bounds-for-now.patch
  to fix a build failure with gcc12. With gcc12, a "false positive"
  of "array subscript 0 is outside array bounds" is seen in
  genprotimg/boot/stage3a.c (bsc#1200131).</changelog>
  <changelog author="mpost@suse.com" date="1658145600">- Added s390-tools-sles15sp4-hyptop-increase-initial-update-interval.patch
  for bsc#1201412. Initial iteration of hyptop can produce bloated values
  independent from the update delay set by the user.</changelog>
  <changelog author="mpost@suse.com" date="1667476800">- Added s390-tools-sles15sp4-zipl-boot-add-secure-boot-trailer.patch
  for bsc#1204965. New IBM Z firmware requires all signed boot
  images to contain a trailing data block with a specific format.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1672747200">-  Added the following patches for
  KVM: Secure Execution Attestation Userspace Tool (s390-tools)
  (jsc#SLE-24831, jsc#SLE-22854, bsc#1206706)
  * s390-tools-sles15sp4-libpv-New-library-for-PV-tools.patch
  * s390-tools-sles15sp4-pvattest-tools-Add-tool-for-attestation.patch
  * s390-tools-sles15sp4-pvattest-Improve-error-reporting.patch
  * s390-tools-sles15sp4-pvattest-Create-perform-and-verify-attestation-measu.patch
  * s390-tools-sles15sp4-pvattest-Improve-logging.patch
  * s390-tools-sles15sp4-pvattest-Add-more-information-to-verbose-logging.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1674475200">- Added the following patches for bsc#1207175, jsc#SLE-2285, and
  ECO jsc#SLE-24835:
  ap_tools: add ap-check and the ap device type to zdev. This
  feature adds multiple components in support of persistent
  configuration of vfio-ap mediated devices.
  * s390-tools-sles15sp4-01-libutil-add-util_exit_code.patch
  * s390-tools-sles15sp4-02-libutil-Move-some-zdev-file-reading-functions-into-u.patch
  * s390-tools-sles15sp4-03-libutil-Introduce-util_udev.patch
  * s390-tools-sles15sp4-04-libap-Add-library-for-ap-vfio-ap-management-tools.patch
  * s390-tools-sles15sp4-05-ap_tools-Introduce-ap_tools-and-the-ap-check-tool.patch
  * s390-tools-sles15sp4-06-zdev-Introduce-the-ap-device-type.patch
  * s390-tools-sles15sp4-07-libutil-introduce-util_lockfile.patch
  * s390-tools-sles15sp4-08-libutil-add-example-for-util_lockfile.patch
  * s390-tools-sles15sp4-09-libap-use-util_lockfile-and-remove-liblockfile-depen.patch
  * s390-tools-sles15sp4-10-ap_tools-ap-check-use-new-mdevctl-install-location.patch
  * s390-tools-sles15sp4-11-util_lockfile-fix-includes.patch
- Updated the spec file to:
  * Add %dir entries for:
    %{_sysconfdir}/mdevctl.d
    %{_sysconfdir}/mdevctl.d/scripts.d
    %{_sysconfdir}/mdevctl.d/scripts.d/callouts
    %{_prefix}/lib/mdevctl,
    %{_prefix}/lib/mdevctl/scripts.d, and
    %{_prefix}/lib/mdevctl/scripts.d/callouts
    NOTE that these directories do not belong to this package, but
    the mdevctl package has yet to be updated to claim them. So,
    until that happens, we have to temporarily claim ownership of
    them for the s390-tools package to build.
  * Modify the find/grep commands that generate the list of files
    for the package to avoid having files listed more than once.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678449600">- Added the folowing patches (bsc#1209002, and bsc#1209003)
  - Fixes vmcp buffer evalutaion
  * s390-tools-sles15sp4-dbginfo.sh-fix_vmcp_buffer.patch
  - Adds support for kubernetes data collection
  * s390-tools-sles15sp4-dbginfo.sh-add_kubernetes.patch
- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
  when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1684324800">- Applied patches (bsc#1211318)
  * s390-tools-sles15sp4-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp4-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
</package>
<package pkgid="4f7c7d23374b5ba952f5e4459997ad708d7c5fcc067e44cf5263f6b01dc90ef2" name="salt" arch="aarch64">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="d1024d6888ab52ff43f1680ae34adfbba84040f9334679c2cb439cf4a3e01a15" name="salt" arch="s390x">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="2919e2e6f967e2d0741cb7df6db1de389c9afd43f136bbada3c594bc6935211c" name="salt" arch="src">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="31b630427a1750dc53b176c55f25c705658f8cae93f7619074911026abe594ce" name="salt" arch="x86_64">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="5331ea99c40aeebbfbeb1d25d7133f5e042c4b528377c39399a7281208e8a94b" name="salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="e40c41b496b5a613fe5b0adb184ae52a5d25c939e6fc8adb8bed6340d5117024" name="salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="3c9f020ec15c080a93bf4de17ab19402a1e28574b745dfb2ada3fcd066915bd8" name="salt" arch="src">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="bf02a5aa937ca19bdceea3016916fecb5eea14cc97e743f2ea36a854955b0b9b" name="salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="5f1a5546ffc55844fd9a784ef9c186a0dff7e9a4ba0529765e3018b7c70797e3" name="salt-minion" arch="aarch64">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="a1554a8a0f79f1d4ca076a5a44a57e8c6a6f92444de0cf2ef510d04009f0b833" name="salt-minion" arch="s390x">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="fd2583e993a050883f656a227705e14ed466902017d99bcf19ad007a5b02b820" name="salt-minion" arch="x86_64">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="8a0294be26853aee6a4dff0b7db9301a01701e81af03d68163ec5e1452752e92" name="salt-minion" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="f622d34010b0d008db013a539a38acc1d8085eeb748bce76001ddac3eb0a7278" name="salt-minion" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="0a14c369ce4fc2a3cc234b76edd49c05068055d5d58496c08cd4c29eab07ea34" name="salt-minion" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="588e2464552d1bbdaa96ee92bca2c5f0eacfb74e6cd509f9175a3652dde3ed50" name="salt-transactional-update" arch="aarch64">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="a6483b721a0642033a666e9bd56bcfbcd200d3e6554638b4f780cb5155e16406" name="salt-transactional-update" arch="s390x">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="1d844d466e25278d09bab383c8717cc34c0daf3167cbfa9d2803a3408bdfbb86" name="salt-transactional-update" arch="x86_64">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="6937f1f13bfb80108528eafee24fb79b40e00d8b98fa28d38d76cf5e26ea9e0c" name="salt-transactional-update" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="e61f52d52f9f9688abdccf80be2493387e42f63c1c491e788e7b2bb24bf7430a" name="salt-transactional-update" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="021199af3f99333a02983a2656e05662a6797391a3d5e7bf49e835d4cecd3c03" name="salt-transactional-update" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="2d64862e2f5df07e147fe4c5ac276466df5d653b6293306b08fe7a248f98c197" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="20221019" rel="150400.4.3.1"/>
  <changelog author="jsegitz@suse.com" date="1653048000">- Update to version 20220520 to pass stricter 3.4 toolchain checks</changelog>
  <changelog author="jsegitz@suse.com" date="1656072000">- Update to version 20220624. Refreshed:
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_logging.patch
  * fix_networkmanager.patch
  * fix_unprivuser.patch
  Dropped fix_hadoop.patch, not necessary anymore
  * Updated fix_locallogin.patch to allow accesses for nss-systemd
  (bsc#1199630)</changelog>
  <changelog author="jsegitz@suse.com" date="1656072001">- Add fix_userdomain.patch to dontaudit UDP rpc ports (bsc#1193984)</changelog>
  <changelog author="jsegitz@suse.com" date="1657540800">- postfix: Label PID files and some helpers correctly (bsc#1197242)</changelog>
  <changelog author="jsegitz@suse.com" date="1657713600">- Update fix_systemd.patch to add cap sys_admin and kernel_dgram_send for
  systemd_gpt_generator_t (bsc#1200911)</changelog>
  <changelog author="jsegitz@suse.com" date="1657800000">- Update to version 20220714. Refreshed:
  * fix_init.patch
  * fix_systemd_watch.patch</changelog>
  <changelog author="zkubala@suse.com" date="1658836800">- Add fix_cloudform.patch to fix cloud-init runcmd issue with snapper
  (bnc#1201015)</changelog>
  <changelog author="cathy.hu@suse.com" date="1658923200">- fix_networkmanager.patch: Allow NetworkManager_dispatcher_tlp_t
  and NetworkManager_dispatcher_custom_t to access nscd socket
  (bsc#1201741)</changelog>
  <changelog author="kukuk@suse.com" date="1661515200">- Move SUSE directory from manual page section to html docu</changelog>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
</package>
<package pkgid="a1290d2698c60e62bf3160d34d689df3c32e2a20b41c071ae99cf4a822d16b77" name="selinux-policy" arch="src">
  <version epoch="0" ver="20221019" rel="150400.4.3.1"/>
  <changelog author="jsegitz@suse.com" date="1653048000">- Update to version 20220520 to pass stricter 3.4 toolchain checks</changelog>
  <changelog author="jsegitz@suse.com" date="1656072000">- Update to version 20220624. Refreshed:
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_logging.patch
  * fix_networkmanager.patch
  * fix_unprivuser.patch
  Dropped fix_hadoop.patch, not necessary anymore
  * Updated fix_locallogin.patch to allow accesses for nss-systemd
  (bsc#1199630)</changelog>
  <changelog author="jsegitz@suse.com" date="1656072001">- Add fix_userdomain.patch to dontaudit UDP rpc ports (bsc#1193984)</changelog>
  <changelog author="jsegitz@suse.com" date="1657540800">- postfix: Label PID files and some helpers correctly (bsc#1197242)</changelog>
  <changelog author="jsegitz@suse.com" date="1657713600">- Update fix_systemd.patch to add cap sys_admin and kernel_dgram_send for
  systemd_gpt_generator_t (bsc#1200911)</changelog>
  <changelog author="jsegitz@suse.com" date="1657800000">- Update to version 20220714. Refreshed:
  * fix_init.patch
  * fix_systemd_watch.patch</changelog>
  <changelog author="zkubala@suse.com" date="1658836800">- Add fix_cloudform.patch to fix cloud-init runcmd issue with snapper
  (bnc#1201015)</changelog>
  <changelog author="cathy.hu@suse.com" date="1658923200">- fix_networkmanager.patch: Allow NetworkManager_dispatcher_tlp_t
  and NetworkManager_dispatcher_custom_t to access nscd socket
  (bsc#1201741)</changelog>
  <changelog author="kukuk@suse.com" date="1661515200">- Move SUSE directory from manual page section to html docu</changelog>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
</package>
<package pkgid="54a2c62be14a7316f573b01a322c2e5c5c492b3231be022a058f2194bee4a05d" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="20230511+git3.b78f5aff" rel="150400.4.6.1"/>
  <changelog author="jsegitz@suse.com" date="1656072000">- Add fix_userdomain.patch to dontaudit UDP rpc ports (bsc#1193984)</changelog>
  <changelog author="jsegitz@suse.com" date="1657540800">- postfix: Label PID files and some helpers correctly (bsc#1197242)</changelog>
  <changelog author="jsegitz@suse.com" date="1657713600">- Update fix_systemd.patch to add cap sys_admin and kernel_dgram_send for
  systemd_gpt_generator_t (bsc#1200911)</changelog>
  <changelog author="jsegitz@suse.com" date="1657800000">- Update to version 20220714. Refreshed:
  * fix_init.patch
  * fix_systemd_watch.patch</changelog>
  <changelog author="zkubala@suse.com" date="1658836800">- Add fix_cloudform.patch to fix cloud-init runcmd issue with snapper
  (bnc#1201015)</changelog>
  <changelog author="cathy.hu@suse.com" date="1658923200">- fix_networkmanager.patch: Allow NetworkManager_dispatcher_tlp_t
  and NetworkManager_dispatcher_custom_t to access nscd socket
  (bsc#1201741)</changelog>
  <changelog author="kukuk@suse.com" date="1661515200">- Move SUSE directory from manual page section to html docu</changelog>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
</package>
<package pkgid="a189696cd185daa914e1ab889b1b092742f3140bfb167990b4124c10f0e0d9dd" name="selinux-policy" arch="src">
  <version epoch="0" ver="20230511+git3.b78f5aff" rel="150400.4.6.1"/>
  <changelog author="jsegitz@suse.com" date="1656072000">- Add fix_userdomain.patch to dontaudit UDP rpc ports (bsc#1193984)</changelog>
  <changelog author="jsegitz@suse.com" date="1657540800">- postfix: Label PID files and some helpers correctly (bsc#1197242)</changelog>
  <changelog author="jsegitz@suse.com" date="1657713600">- Update fix_systemd.patch to add cap sys_admin and kernel_dgram_send for
  systemd_gpt_generator_t (bsc#1200911)</changelog>
  <changelog author="jsegitz@suse.com" date="1657800000">- Update to version 20220714. Refreshed:
  * fix_init.patch
  * fix_systemd_watch.patch</changelog>
  <changelog author="zkubala@suse.com" date="1658836800">- Add fix_cloudform.patch to fix cloud-init runcmd issue with snapper
  (bnc#1201015)</changelog>
  <changelog author="cathy.hu@suse.com" date="1658923200">- fix_networkmanager.patch: Allow NetworkManager_dispatcher_tlp_t
  and NetworkManager_dispatcher_custom_t to access nscd socket
  (bsc#1201741)</changelog>
  <changelog author="kukuk@suse.com" date="1661515200">- Move SUSE directory from manual page section to html docu</changelog>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
</package>
<package pkgid="aa54b03b1643da5f194dfbaa64ef00503e6f5b6ed0f3e86386cab682efc3b1c4" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="20221019" rel="150400.4.3.1"/>
  <changelog author="jsegitz@suse.com" date="1653048000">- Update to version 20220520 to pass stricter 3.4 toolchain checks</changelog>
  <changelog author="jsegitz@suse.com" date="1656072000">- Update to version 20220624. Refreshed:
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_logging.patch
  * fix_networkmanager.patch
  * fix_unprivuser.patch
  Dropped fix_hadoop.patch, not necessary anymore
  * Updated fix_locallogin.patch to allow accesses for nss-systemd
  (bsc#1199630)</changelog>
  <changelog author="jsegitz@suse.com" date="1656072001">- Add fix_userdomain.patch to dontaudit UDP rpc ports (bsc#1193984)</changelog>
  <changelog author="jsegitz@suse.com" date="1657540800">- postfix: Label PID files and some helpers correctly (bsc#1197242)</changelog>
  <changelog author="jsegitz@suse.com" date="1657713600">- Update fix_systemd.patch to add cap sys_admin and kernel_dgram_send for
  systemd_gpt_generator_t (bsc#1200911)</changelog>
  <changelog author="jsegitz@suse.com" date="1657800000">- Update to version 20220714. Refreshed:
  * fix_init.patch
  * fix_systemd_watch.patch</changelog>
  <changelog author="zkubala@suse.com" date="1658836800">- Add fix_cloudform.patch to fix cloud-init runcmd issue with snapper
  (bnc#1201015)</changelog>
  <changelog author="cathy.hu@suse.com" date="1658923200">- fix_networkmanager.patch: Allow NetworkManager_dispatcher_tlp_t
  and NetworkManager_dispatcher_custom_t to access nscd socket
  (bsc#1201741)</changelog>
  <changelog author="kukuk@suse.com" date="1661515200">- Move SUSE directory from manual page section to html docu</changelog>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
</package>
<package pkgid="fac736049429c2c5bb1e4f02518819f577e2a2804a257cfab1f7050853e58cc0" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="20230511+git3.b78f5aff" rel="150400.4.6.1"/>
  <changelog author="jsegitz@suse.com" date="1656072000">- Add fix_userdomain.patch to dontaudit UDP rpc ports (bsc#1193984)</changelog>
  <changelog author="jsegitz@suse.com" date="1657540800">- postfix: Label PID files and some helpers correctly (bsc#1197242)</changelog>
  <changelog author="jsegitz@suse.com" date="1657713600">- Update fix_systemd.patch to add cap sys_admin and kernel_dgram_send for
  systemd_gpt_generator_t (bsc#1200911)</changelog>
  <changelog author="jsegitz@suse.com" date="1657800000">- Update to version 20220714. Refreshed:
  * fix_init.patch
  * fix_systemd_watch.patch</changelog>
  <changelog author="zkubala@suse.com" date="1658836800">- Add fix_cloudform.patch to fix cloud-init runcmd issue with snapper
  (bnc#1201015)</changelog>
  <changelog author="cathy.hu@suse.com" date="1658923200">- fix_networkmanager.patch: Allow NetworkManager_dispatcher_tlp_t
  and NetworkManager_dispatcher_custom_t to access nscd socket
  (bsc#1201741)</changelog>
  <changelog author="kukuk@suse.com" date="1661515200">- Move SUSE directory from manual page section to html docu</changelog>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
</package>
<package pkgid="8f8b900d7e8429d8f6878ebd5ee3ea4f8a412b7404212868c57fdafb10d03290" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="20221019" rel="150400.4.3.1"/>
  <changelog author="jsegitz@suse.com" date="1653048000">- Update to version 20220520 to pass stricter 3.4 toolchain checks</changelog>
  <changelog author="jsegitz@suse.com" date="1656072000">- Update to version 20220624. Refreshed:
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_logging.patch
  * fix_networkmanager.patch
  * fix_unprivuser.patch
  Dropped fix_hadoop.patch, not necessary anymore
  * Updated fix_locallogin.patch to allow accesses for nss-systemd
  (bsc#1199630)</changelog>
  <changelog author="jsegitz@suse.com" date="1656072001">- Add fix_userdomain.patch to dontaudit UDP rpc ports (bsc#1193984)</changelog>
  <changelog author="jsegitz@suse.com" date="1657540800">- postfix: Label PID files and some helpers correctly (bsc#1197242)</changelog>
  <changelog author="jsegitz@suse.com" date="1657713600">- Update fix_systemd.patch to add cap sys_admin and kernel_dgram_send for
  systemd_gpt_generator_t (bsc#1200911)</changelog>
  <changelog author="jsegitz@suse.com" date="1657800000">- Update to version 20220714. Refreshed:
  * fix_init.patch
  * fix_systemd_watch.patch</changelog>
  <changelog author="zkubala@suse.com" date="1658836800">- Add fix_cloudform.patch to fix cloud-init runcmd issue with snapper
  (bnc#1201015)</changelog>
  <changelog author="cathy.hu@suse.com" date="1658923200">- fix_networkmanager.patch: Allow NetworkManager_dispatcher_tlp_t
  and NetworkManager_dispatcher_custom_t to access nscd socket
  (bsc#1201741)</changelog>
  <changelog author="kukuk@suse.com" date="1661515200">- Move SUSE directory from manual page section to html docu</changelog>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
</package>
<package pkgid="54295920da0d78abcbe2f1d73efe1a13848048b218464c20a019efd9fad55ca3" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="20230511+git3.b78f5aff" rel="150400.4.6.1"/>
  <changelog author="jsegitz@suse.com" date="1656072000">- Add fix_userdomain.patch to dontaudit UDP rpc ports (bsc#1193984)</changelog>
  <changelog author="jsegitz@suse.com" date="1657540800">- postfix: Label PID files and some helpers correctly (bsc#1197242)</changelog>
  <changelog author="jsegitz@suse.com" date="1657713600">- Update fix_systemd.patch to add cap sys_admin and kernel_dgram_send for
  systemd_gpt_generator_t (bsc#1200911)</changelog>
  <changelog author="jsegitz@suse.com" date="1657800000">- Update to version 20220714. Refreshed:
  * fix_init.patch
  * fix_systemd_watch.patch</changelog>
  <changelog author="zkubala@suse.com" date="1658836800">- Add fix_cloudform.patch to fix cloud-init runcmd issue with snapper
  (bnc#1201015)</changelog>
  <changelog author="cathy.hu@suse.com" date="1658923200">- fix_networkmanager.patch: Allow NetworkManager_dispatcher_tlp_t
  and NetworkManager_dispatcher_custom_t to access nscd socket
  (bsc#1201741)</changelog>
  <changelog author="kukuk@suse.com" date="1661515200">- Move SUSE directory from manual page section to html docu</changelog>
  <changelog author="jsegitz@suse.com" date="1662984000">- Revamped rtorrent module</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664280000">- Update fix_xserver.patch to add greetd support (bsc#1198559)</changelog>
  <changelog author="jsegitz@suse.com" date="1664452800">- Update fix_networkmanager.patch to ensure NetworkManager chrony
  dispatcher is properly labled and update fix_chronyd.patch to ensure
  chrony helper script has proper label to be used by NetworkManager.
  Also allow NetworkManager_dispatcher_custom_t to query systemd status
  (bsc#1203824)</changelog>
  <changelog author="jsegitz@suse.com" date="1664539200">- Updated quilt couldn't unpack tarball. This will cause ongoing issues
  so drop the sed statement in the %prep section and add
  distro_suse_to_distro_redhat.patch to add the necessary changes
  via a patch</changelog>
  <changelog author="jsegitz@suse.com" date="1666180800">- Update to version 20221019. Refreshed:
  * distro_suse_to_distro_redhat.patch
  * fix_apache.patch
  * fix_chronyd.patch
  * fix_cron.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_rpm.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_xserver.patch
- Dropped fix_cockpit.patch as this is now packaged with cockpit itself
- Remove the ipa module, freeip ships their own module
- Added fix_alsa.patch to allow reading of config files in home directories
- Extended fix_networkmanager.patch and fix_postfix.patch to account
  for SUSE systems
- Added dontaudit_interface_kmod_tmpfs.patch to prevent AVCs when startproc
  queries the running processes
- Updated fix_snapper.patch to allow snapper to talk to rpm via dbus</changelog>
  <changelog author="cathy.hu@suse.com" date="1669291200">- fix_sysnetwork.patch: firewalld uses /etc/sysconfig/network/ for
  network interface definition instead of /etc/sysconfig/network-scripts/,
  modified sysnetwork.fc to reflect that (bsc#1205580).</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809600">- Drop fix_irqbalance.patch: superseded by upstream</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1669809601">- Add fix_irqbalance.patch: support netlink socket operations (bsc#1205434)</changelog>
  <changelog author="jsegitz@suse.com" date="1670328000">- Updated fix_networkmanager.patch to allow NetworkManager to watch
  net_conf_t (bsc#1206109)</changelog>
  <changelog author="jsegitz@suse.com" date="1670932800">- Updated fix_networkmanager.patch to fixe labeling of nm-dispatcher and
  nm-priv-helper until the packaging is adjusted (bsc#1206355)
- Update fix_chronyd.patch to allow  sendto towards
  NetworkManager_dispatcher_custom_t. Added new interface
  networkmanager_dispatcher_custom_dgram_send for this (bsc#1206357)
- Update fix_dbus.patch to allow dbus to watch lib directories (bsc#1205895)</changelog>
  <changelog author="jsegitz@suse.com" date="1682424000">- Added fix_filesystem.patch to prevent labeling of overlayfs
  mountpoint</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684843200">- Packaging rework. Move policy to git repository
  Please use `osc service manualrun` to update this OBS package to the
  newest git version.
  * Added README.Update describing how to update this package
  * Added _service file that pulls from selinux-policy and tar it
  * Updated selinux-policy.spec to build selinux-policy with
    container-selinux
  * Updated update.sh
  * Removed suse specific modules as they are now covered by git commits
  * packagekit.te packagekit.if packagekit.fc
  * rebootmgr.te rebootmgr.if rebootmgr.fc
  * rtorrent.te rtorrent.if rtorrent.fc
  * wicked.te wicked.if wicked.fc
  * Removed *.patch as they are now covered by git commits:
  * distro_suse_to_distro_redhat.patch
  * dontaudit_interface_kmod_tmpfs.patch
  * fix_accountsd.patch
  * fix_alsa.patch
  * fix_apache.patch
  * fix_auditd.patch
  * fix_authlogin.patch
  * fix_automount.patch
  * fix_bitlbee.patch
  * fix_chronyd.patch
  * fix_cloudform.patch
  * fix_colord.patch
  * fix_corecommand.patch
  * fix_cron.patch
  * fix_dbus.patch
  * fix_djbdns.patch
  * fix_dnsmasq.patch
  * fix_dovecot.patch
  * fix_firewalld.patch
  * fix_filesystem.patch
  * fix_fwupd.patch
  * fix_geoclue.patch
  * fix_hypervkvp.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_irqbalance.patch
  * fix_java.patch
  * fix_kernel_sysctl.patch
  * fix_libraries.patch
  * fix_locallogin.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_mcelog.patch
  * fix_miscfiles.patch
  * fix_nagios.patch
  * fix_networkmanager.patch
  * fix_nis.patch
  * fix_nscd.patch
  * fix_ntp.patch
  * fix_openvpn.patch
  * fix_postfix.patch
  * fix_rpm.patch
  * fix_screen.patch
  * fix_selinuxutil.patch
  * fix_smartmon.patch
  * fix_snapper.patch
  * fix_sslh.patch
  * fix_sysnetwork.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch
  * fix_userdomain.patch
  * fix_usermanage.patch
  * fix_wine.patch
  * fix_xserver.patch
  * sedoctool.patch
  * systemd_domain_dyntrans_type.patch
  * fedora-policy-20221019.tar.bz2</changelog>
  <changelog author="Gayane.Osipyan@suse.com" date="1684929600">- Update to version 20230511+git3.b78f5aff:
  * fix entropy daemon (bsc#1211045)</changelog>
</package>
<package pkgid="7b1e217f9f7c94e6ede4613da8383c19f72ab16b7db1bc56affeeba558b360d7" name="sg3_utils" arch="aarch64">
  <version epoch="0" ver="1.47+13.75d23ac" rel="150400.3.6.1"/>
  <changelog author="hare@suse.de" date="1502452800">- Drop patch merged with git repository
  * drop add-lunsearch-filter-to-searchexisting.patch
- Drop rules included in git repository
  * drop 40-usb-blacklist.rules
- Update to latest svn snapshot:
  * sg_rdac: add sanity checks for -f=lun value
  * sg_vpd improvements
  * sg_ses: fix uninitialized struct
  * sg_luns: resync with SAM and SPC drafts
  * sg_vpd: fix struct misalignment introduced by --force
  * sg_logs: add --vendor and fixup enumeration
- Port patches from SLES:
  * Add systemd service files for LUN masking (bsc#954600)
  * 55-scsi-sg3_id.rules: handle VPD page 0x80 correctly (bsc#1006469)
  * scripts: added udev rules for legacy CCISS (bsc#1006175)
  * rescan-scsi-bus.sh: Add lunsearch filter to findresized()
  (bsc#1027176)
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063)
  * 55-scsi-sg3_id.rules: allow to override sysfs inquiry
  (bsc#1012523)
  * sg_inq: export all NAA values (bsc#1050767)
  * Silence gcc warnings</changelog>
  <changelog author="hare@suse.de" date="1507896000">- Update to svn r721:
  * Merge SUSE-specific patches with upstream svn
  * sg_write_atomic: add new program for WRITE ATOMIC
  * sg_bg_ctl: new background control command
  * sg_ses: Improve output and option handling
  * sg_logs: Add --vendor and decode more pages
  * sg_get_lba_status: add new program
  * Install rescan-scsi-bus.sh and scsi_logging_level per default</changelog>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
</package>
<package pkgid="ef1651d75482f91d35e1a45f65646f7f4c5e729bdfba973f049fba2791f5cf60" name="sg3_utils" arch="s390x">
  <version epoch="0" ver="1.47+13.75d23ac" rel="150400.3.6.1"/>
  <changelog author="hare@suse.de" date="1502452800">- Drop patch merged with git repository
  * drop add-lunsearch-filter-to-searchexisting.patch
- Drop rules included in git repository
  * drop 40-usb-blacklist.rules
- Update to latest svn snapshot:
  * sg_rdac: add sanity checks for -f=lun value
  * sg_vpd improvements
  * sg_ses: fix uninitialized struct
  * sg_luns: resync with SAM and SPC drafts
  * sg_vpd: fix struct misalignment introduced by --force
  * sg_logs: add --vendor and fixup enumeration
- Port patches from SLES:
  * Add systemd service files for LUN masking (bsc#954600)
  * 55-scsi-sg3_id.rules: handle VPD page 0x80 correctly (bsc#1006469)
  * scripts: added udev rules for legacy CCISS (bsc#1006175)
  * rescan-scsi-bus.sh: Add lunsearch filter to findresized()
  (bsc#1027176)
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063)
  * 55-scsi-sg3_id.rules: allow to override sysfs inquiry
  (bsc#1012523)
  * sg_inq: export all NAA values (bsc#1050767)
  * Silence gcc warnings</changelog>
  <changelog author="hare@suse.de" date="1507896000">- Update to svn r721:
  * Merge SUSE-specific patches with upstream svn
  * sg_write_atomic: add new program for WRITE ATOMIC
  * sg_bg_ctl: new background control command
  * sg_ses: Improve output and option handling
  * sg_logs: Add --vendor and decode more pages
  * sg_get_lba_status: add new program
  * Install rescan-scsi-bus.sh and scsi_logging_level per default</changelog>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
</package>
<package pkgid="45dfc99ab0be439ea34adf14e913b89d267e5747b5548a19610d25ad2fb52ead" name="sg3_utils" arch="src">
  <version epoch="0" ver="1.47+13.75d23ac" rel="150400.3.6.1"/>
  <changelog author="hare@suse.de" date="1502452800">- Drop patch merged with git repository
  * drop add-lunsearch-filter-to-searchexisting.patch
- Drop rules included in git repository
  * drop 40-usb-blacklist.rules
- Update to latest svn snapshot:
  * sg_rdac: add sanity checks for -f=lun value
  * sg_vpd improvements
  * sg_ses: fix uninitialized struct
  * sg_luns: resync with SAM and SPC drafts
  * sg_vpd: fix struct misalignment introduced by --force
  * sg_logs: add --vendor and fixup enumeration
- Port patches from SLES:
  * Add systemd service files for LUN masking (bsc#954600)
  * 55-scsi-sg3_id.rules: handle VPD page 0x80 correctly (bsc#1006469)
  * scripts: added udev rules for legacy CCISS (bsc#1006175)
  * rescan-scsi-bus.sh: Add lunsearch filter to findresized()
  (bsc#1027176)
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063)
  * 55-scsi-sg3_id.rules: allow to override sysfs inquiry
  (bsc#1012523)
  * sg_inq: export all NAA values (bsc#1050767)
  * Silence gcc warnings</changelog>
  <changelog author="hare@suse.de" date="1507896000">- Update to svn r721:
  * Merge SUSE-specific patches with upstream svn
  * sg_write_atomic: add new program for WRITE ATOMIC
  * sg_bg_ctl: new background control command
  * sg_ses: Improve output and option handling
  * sg_logs: Add --vendor and decode more pages
  * sg_get_lba_status: add new program
  * Install rescan-scsi-bus.sh and scsi_logging_level per default</changelog>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
</package>
<package pkgid="d2ecf8becd3e04a294b4649089010c332c64647adcbe6bbbbe7d0e4c3f6eea31" name="sg3_utils" arch="x86_64">
  <version epoch="0" ver="1.47+13.75d23ac" rel="150400.3.6.1"/>
  <changelog author="hare@suse.de" date="1502452800">- Drop patch merged with git repository
  * drop add-lunsearch-filter-to-searchexisting.patch
- Drop rules included in git repository
  * drop 40-usb-blacklist.rules
- Update to latest svn snapshot:
  * sg_rdac: add sanity checks for -f=lun value
  * sg_vpd improvements
  * sg_ses: fix uninitialized struct
  * sg_luns: resync with SAM and SPC drafts
  * sg_vpd: fix struct misalignment introduced by --force
  * sg_logs: add --vendor and fixup enumeration
- Port patches from SLES:
  * Add systemd service files for LUN masking (bsc#954600)
  * 55-scsi-sg3_id.rules: handle VPD page 0x80 correctly (bsc#1006469)
  * scripts: added udev rules for legacy CCISS (bsc#1006175)
  * rescan-scsi-bus.sh: Add lunsearch filter to findresized()
  (bsc#1027176)
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063)
  * 55-scsi-sg3_id.rules: allow to override sysfs inquiry
  (bsc#1012523)
  * sg_inq: export all NAA values (bsc#1050767)
  * Silence gcc warnings</changelog>
  <changelog author="hare@suse.de" date="1507896000">- Update to svn r721:
  * Merge SUSE-specific patches with upstream svn
  * sg_write_atomic: add new program for WRITE ATOMIC
  * sg_bg_ctl: new background control command
  * sg_ses: Improve output and option handling
  * sg_logs: Add --vendor and decode more pages
  * sg_get_lba_status: add new program
  * Install rescan-scsi-bus.sh and scsi_logging_level per default</changelog>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
</package>
<package pkgid="254feba841d5e7f1dce44141e4707a853b8589aa0a9619fd63323ad5dffd9a99" name="shim" arch="aarch64">
  <version epoch="0" ver="15.7" rel="150300.4.16.1"/>
  <changelog author="jsegitz@suse.com" date="1626350400">- Update the SLE signatures (sync shim.changes from SLE)</changelog>
  <changelog author="lnussel@suse.de" date="1649764800">- use common SBAT values (boo#1193282)</changelog>
  <changelog author="jlee@suse.com" date="1656417600">- Update to 15.6 (bsc#1198458)
  - shim-15.6.tar.bz2 is downloaded from bsc#1198458#c76
    which is from upstream grub2.cve_2021_3695.ms keybase channel.
  - For building 15.6~rc1 aarch64 image (d6eb9c6 Modernize aarch64), objcopy needs to
    support efi-app-aarch64 target. So we need the following patches in bintuils:
  - binutils-AArch64-Add-support-for-AArch64-EFI-efi-aarch64.patch
    b69c9d41e8 AArch64: Add support for AArch64 EFI (efi-*-aarch64).
  - binutils-Re-AArch64-Add-support-for-AArch64-EFI-efi-aarch64.patch
    32384aa396 Re: AArch64: Add support for AArch64 EFI (efi-*-aarch64)
  - binutils-Re-Add-support-for-AArch64-EFI-efi-aarch64.patch
    d91c67e873 Re: Add support for AArch64 EFI (efi-*-aarch64)
  - Patches (git log --oneline --reverse 15.5~..77144e5a4)
    448f096 MokManager: removed Locate graphic output protocol fail error message (bsc#1193315, bsc#1198458)
    a2da05f shim: implement SBAT verification for the shim_lock protocol
    bda03b8 post-process-pe: Fix a missing return code check
    af18810 CI: don't cancel testing when one fails
    ba580f9 CI: remove EOL Fedoras from github actions
    bfeb4b3 Remove aarch64 build tests before f35
    38cc646 CI: Add f36 and centos9 CI build tests.
    b5185cb post-process-pe: Fix format string warnings on 32-bit platforms
    31094e5 tests: also look for system headers in multi-arch directories
    4df989a mock-variables.c: fix gcc warning
    6aac595 test-str.c: fix gcc warnings with FORTIFY_SOURCE enabled
    2670c6a Allow MokListTrusted to be enabled by default
    5c44aaf Add code of conduct
    d6eb9c6 Modernize aarch64
    9af50c1 Use ASCII as fallback if Unicode Box Drawing characters fail
    de87985 make: don't treat cert.S specially
    803dc5c shim: use SHIM_DEVEL_VERBOSE when built in devel mode
    6402f1f SBAT matching: Break out of the inner sbat loop if we find the entry.
    bb4b60e Add verify_image
    acfd48f Abstract out image reading
    35d7378 Load additional certs from a signed binary
    8ce2832 post-process-pe: there is no 's' argument.
    465663e Add some missing PE image flag definitions
    226fee2 PE Loader: support and require NX
    df96f48 Add MokPolicy variable and MOK_POLICY_REQUIRE_NX
    b104fc4 post-process-pe: set EFI_IMAGE_DLLCHARACTERISTICS_NX_COMPAT
    f81a7cc SBAT revocation management
    abe41ab make: unbreak scan-build again for gnu-efi
    610a1ac sbat.h: minor reformatting for legibility
    f28833f peimage.h: make our signature macros force the type
    5d789ca Always initialize data/datasize before calling read_image()
    a50d364 sbat policy: make our policy change actions symbolic
    5868789 load_certs: trust dir-&gt;Read() slightly less.
    a78673b mok.c: fix a trivial dead assignment
    759f061 Fix preserve_sbat_uefi_variable() logic
    aa61fdf Give the Coverity scanner some more GCC blinders...
    0214cd9 load_cert_file(): don't defererence NULL
    1eca363 mok import: handle OOM case
    75449bc sbat: Make nth_sbat_field() honor the size limit
    c0bcd04 shim-15.6~rc1
    77144e5 SBAT Policy latest should be a one-shot
  - 15.5 release note https://github.com/rhboot/shim/releases
  Broken ia32 relocs and an unimportant submodule change. by @vathpela in #357
  mok: allocate MOK config table as BootServicesData by @lcp in #361
  Don't call QueryVariableInfo() on EFI 1.10 machines by @vathpela in #364
  Relax the check for import_mok_state() by @lcp in #372
  SBAT.md: trivial changes by @hallyn in #389
  shim: another attempt to fix load options handling by @chrisccoulson in #379
  Add tests for our load options parsing. by @vathpela in #390
  arm/aa64: fix the size of .rela* sections by @lcp in #383
  mok: fix potential buffer overrun in import_mok_state by @jyong2 in #365
  mok: relax the maximum variable size check by @lcp in #369
  Don't unhook ExitBootServices when EBS protection is disabled by @sforshee in #378
  fallback: find_boot_option() needs to return the index for the boot entry in optnum by @jsetje in #396
  httpboot: Ignore case when checking HTTP headers by @frozencemetery in #403
  Fallback allocation errors by @vathpela in #402
  shim: avoid BOOTx64.EFI in message on other architectures by @xypron in #406
  str: remove duplicate parameter check by @xypron in #408
  fallback: add compile option FALLBACK_NONINTERACTIVE by @xnox in #359
  Test mok mirror by @vathpela in #394
  Modify sbat.md to help with readability. by @eshiman in #398
  csv: detect end of csv file correctly by @xypron in #404
  Specify that the .sbat section is ASCII not UTF-8 by @daxtens in #413
  tests: add "include-fixed" GCC directory to include directories by @diabonas in #415
  pe: simplify generate_hash() by @xypron in #411
  Don't make shim abort when TPM log event fails (RHBZ #2002265) by @rmetrich in #414
  Fallback to default loader if parsed one does not exist by @julian-klode in #393
  fallback: Fix for BootOrder crash when index returned by find_boot_option() is not in current BootOrder list by @rmetrich in #422
  Better console checks by @vathpela in #416
  docs: update SBAT UEFI variable name by @nicholasbishop in #421
  Don't parse load options if invoked from removable media path by @julian-klode in #399
  fallback: fix fallback not passing arguments of the first boot option by @martinezjavier in #433
  shim: Don't stop forever at "Secure Boot not enabled" notification by @rmetrich in #438
  Shim 15.5 coverity by @vathpela in #439
  Allocate mokvar table in runtime memory. by @vathpela in #447
  Remove post-process-pe on 'make clean' by @vathpela in #448
  pe: missing perror argument by @xypron in #443
  - 15.6-rc1 release note https://github.com/rhboot/shim/releases
  MokManager: removed Locate graphic output protocol fail error message by @joeyli in #441
  shim: implement SBAT verification for the shim_lock protocol by @chrisccoulson in #456
  post-process-pe: Fix a missing return code check by @vathpela in #462
  Update github actions matrix to be more useful by @frozencemetery in #469
  Add f36 and centos9 CI builds by @vathpela in #470
  post-process-pe: Fix format string warnings on 32-bit platforms by @steve-mcintyre in #464
  tests: also look for system headers in multi-arch directories by @steve-mcintyre in #466
  tests: fix gcc warnings by @akodanev in #463
  Allow MokListTrusted to be enabled by default by @esnowberg in #455
  Add code of conduct by @frozencemetery in #427
  Re-add ARM AArch64 support by @vathpela in #468
  Use ASCII as fallback if Unicode Box Drawing characters fail by @vathpela in #428
  make: don't treat cert.S specially by @vathpela in #475
  shim: use SHIM_DEVEL_VERBOSE when built in devel mode by @vathpela in #474
  Break out of the inner sbat loop if we find the entry. by @vathpela in #476
  Support loading additional certificates by @esnowberg in #446
  Add support for NX (W^X) mitigations. by @vathpela in #459
  Misc fixups from scan-build. by @vathpela in #477
  Fix preserve_sbat_uefi_variable() logic by @jsetje in #478
  - 15.6 release note https://github.com/rhboot/shim/releases
  MokManager: removed Locate graphic output protocol fail error message by @joeyli in #441
  shim: implement SBAT verification for the shim_lock protocol by @chrisccoulson in #456
  post-process-pe: Fix a missing return code check by @vathpela in #462
  Update github actions matrix to be more useful by @frozencemetery in #469
  Add f36 and centos9 CI builds by @vathpela in #470
  post-process-pe: Fix format string warnings on 32-bit platforms by @steve-mcintyre in #464
  tests: also look for system headers in multi-arch directories by @steve-mcintyre in #466
  tests: fix gcc warnings by @akodanev in #463
  Allow MokListTrusted to be enabled by default by @esnowberg in #455
  Add code of conduct by @frozencemetery in #427
  Re-add ARM AArch64 support by @vathpela in #468
  Use ASCII as fallback if Unicode Box Drawing characters fail by @vathpela in #428
  make: don't treat cert.S specially by @vathpela in #475
  shim: use SHIM_DEVEL_VERBOSE when built in devel mode by @vathpela in #474
  Break out of the inner sbat loop if we find the entry. by @vathpela in #476
  Support loading additional certificates by @esnowberg in #446
  Add support for NX (W^X) mitigations. by @vathpela in #459
  Misc fixups from scan-build. by @vathpela in #477
  Fix preserve_sbat_uefi_variable() logic by @jsetje in #478
  SBAT Policy latest should be a one-shot by @jsetje in #481
  pe: Fix a buffer overflow when SizeOfRawData &gt; VirtualSize by @chriscoulson
  pe: Perform image verification earlier when loading grub by @chriscoulson
  Update advertised sbat generation number for shim by @jsetje
  Update SBAT generation requirements for 05/24/22 by @jsetje
  Also avoid CVE-2022-28737 in verify_image() by @vathpela
  - Drop upstreamed patch:
  - shim-bsc1184454-allocate-mok-config-table-BS.patch
  - Allocate MOK config table as BootServicesData to avoid the error message
  from linux kernel
  - 4068fd42c8		15.5-rc1~70
  - shim-bsc1185441-fix-handling-of-ignore_db-and-user_insecure_mode.patch
  - Handle ignore_db and user_insecure_mode correctly
  - 822d07ad4f07		15.5-rc1~73
  - shim-bsc1185621-relax-max-var-sz-check.patch
  - Relax the maximum variable size check for u-boot
  - 3f327f546c219634b2	15.5-rc1~49
  - shim-bsc1185261-relax-import_mok_state-check.patch
  - Relax the check for import_mok_state() when Secure Boot is off
  - 9f973e4e95b113	15.5-rc1~67
  - shim-bsc1185232-relax-loadoptions-length-check.patch
  - Relax the check for the LoadOptions length
  - ada7ff69bd8a95	15.5-rc1~52
  - shim-fix-aa64-relsz.patch
  - Fix the size of rela* sections for AArch64
  - 34e3ef205c5d65	15.5-rc1~51
  - shim-bsc1187260-fix-efi-1.10-machines.patch
  - Don't call QueryVariableInfo() on EFI 1.10 machines
  - 493bd940e5		15.5-rc1~69
  - shim-bsc1185232-fix-config-table-copying.patch
  - Avoid buffer overflow when copying the MOK config table
  - 7501b6bb44		15.5-rc1~50
  - shim-bsc1187696-avoid-deleting-rt-variables.patch
  - Avoid deleting the mirrored RT variables
  - b1fead0f7c9		15.5-rc1~37
  - Add "rm -f *.o" after building MokManager/fallback in shim.spec
    to make sure all object files gets rebuilt
  - reference: https://github.com/rhboot/shim/pull/461
- The following fix-CVE-2022-28737-v6 patches against bsc#1198458 are included
  in shim-15.6.tar.bz2
  - shim-bsc1198458-pe-Fix-a-buffer-overflow-when-SizeOfRawData-VirtualS.patch
    pe: Fix a buffer overflow when SizeOfRawData VirtualSize
  - shim-bsc1198458-pe-Perform-image-verification-earlier-when-loading-g.patch
    pe: Perform image verification earlier when loading grub
  - shim-bsc1198458-Update-advertised-sbat-generation-number-for-shim.patch
    Update advertised sbat generation number for shim
  - shim-bsc1198458-Update-SBAT-generation-requirements-for-05-24-22.patch
    Update SBAT generation requirements for 05/24/22
  - shim-bsc1198458-Also-avoid-CVE-2022-28737-in-verify_image.patch
    Also avoid CVE-2022-28737 in verify_image()
  - 0006-shim-15.6-rc2.patch
  - 0007-sbat-add-the-parsed-SBAT-variable-entries-to-the-deb.patch
    sbat: add the parsed SBAT variable entries to the debug log
  - 0008-bump-version-to-shim-15.6.patch
- Add mokutil command to post script for setting sbat policy to latest mode
  when the SbatPolicy-605dab50-e046-4300-abb6-3dd810dd8b23 is not created.
  (bsc#1198458)
- Add shim-bsc1198101-opensuse-cert-prompt.patch back to openSUSE shim to
  show the prompt to ask whether the user trusts openSUSE certificate or not
  (bsc#1198101)
- Updated vendor dbx binary and script (bsc#1198458)
  - Updated dbx-cert.tar.xz and vendor-dbx-sles.bin for adding
    SLES-UEFI-SIGN-Certificate-2021-05.crt to vendor dbx list.
  - Updated dbx-cert.tar.xz and vendor-dbx-opensuse.bin for adding
    openSUSE-UEFI-SIGN-Certificate-2021-05.crt to vendor dbx list.
  - Updated vendor-dbx.bin for adding SLES-UEFI-SIGN-Certificate-2021-05.crt
    and openSUSE-UEFI-SIGN-Certificate-2021-05.crt for testing environment.
  - Updated generate-vendor-dbx.sh script for generating a vendor-dbx.bin
    file which includes all .der for testing environment.</changelog>
  <changelog author="jlee@suse.com" date="1658750400">- Revoked the change in shim.spec for "use common SBAT values (boo#1193282)"
  - we need to build openSUSE Tumbleweed's shim on Leap 15.4 because Factory
    is unstable for building out a stable shim binary for signing. (bsc#1198458)
  - But the rpm-config-suse package in Leap 15.4 is direct copied from SLE 15.4
    because closing-the-leap-gap. So sbat_distro_* variables are SLE version,
    not for openSUSE. (bsc#1198458)</changelog>
  <changelog author="jlee@suse.com" date="1659096000">- Change the URL in SBAT section to mail:security@suse.de. (bsc#1193282)</changelog>
  <changelog author="jlee@suse.com" date="1659700800">- Add logic to shim.spec for detecting --set-sbat-policy option before
  using mokutil to set sbat policy. (bsc#1202120)</changelog>
  <changelog author="khanich.opensource@gmx.de" date="1662984000">- Add logic to shim.spec to only set sbat policy when efivarfs is writeable.
  (bsc#1201066)</changelog>
  <changelog author="mchang@suse.com" date="1664452800">- shim-install: ensure grub.cfg created is not overwritten after
  installing grub related files</changelog>
  <changelog author="jlee@suse.com" date="1668513600">- For pushing openSUSE:Factory/shim to SLE15-SP5, sync the shim.spec
  and shim.changes: (jsc#PED-127)
  - Add some change log from SLE shim.changes to Factory shim.changes
    Those messages are added "(sync shim.changes from SLE)" tag.
  - Add the following changes to shim.spec
  - only apply Patch100, the shim-bsc1198101-opensuse-cert-prompt.patch
    on openSUSE.
  - Enable the AArch64 signature check for SLE:
  [#] AArch64 signature
  signature=%{SOURCE13}</changelog>
  <changelog author="jlee@suse.com" date="1668513601">- Add shim-Enable-TDX-measurement-to-RTMR-register.patch to support
  enhance shim measurement to TD RTMR. (jsc#PED-1273)</changelog>
  <changelog author="jlee@suse.com" date="1668513602">- Add shim-jscPED-127-upgrade-shim-in-SLE15-SP5.patch for backporting the following
  patches between 15.6 with aa1b289a1a (jsc#PED-127):
    aa1b289a1a16774afc3143b8948d97261f0872d0 mok: remove MokListTrusted from PCR 7
    0cf43ac6d78c6f47f8b91210639ac1aa63665f0b Add -malign-double to IA32 compiler flags
    ea4911c2f3ce8f8f703a1476febac86bb16b00fd load_cert_file: Use EFI RT memory function
    2d4ebb5a798aafd3b06d2c3cb9c9840c1caa41ef load_cert_file: Fix stack issue
    5c537b3d0cf8c393dad2e61d49aade68f3af1401 shim: Flush the memory region from i-cache before execution
    14d63398298c8de23036a4cf61594108b7345863 Discard load-options that start with a NUL
    092c2b2bbed950727e41cf450b61c794881c33e7 Reference MokListRT instead of MokList
    0eb07e11b20680200d3ce9c5bc59299121a75388 Make SBAT variable payload introspectable</changelog>
  <changelog author="jlee@suse.com" date="1668686400">- Update shim.changes, added missed shim 15.6-rc1 and 15.6 changelog to
  the item in Update to 15.6. (bsc#1198458)</changelog>
  <changelog author="jlee@suse.com" date="1668686401">- Update to 15.7 (bsc#1198458)(jsc#PED-127)
  - Patches (git log --oneline --reverse 15.6..15.7)
  0eb07e1 Make SBAT variable payload introspectable
  092c2b2 Reference MokListRT instead of MokList
  8b59b69 Add a link to the test plan in the readme.
  4fd484e Enable TDX measurement to RTMR register
  14d6339 Discard load-options that start with a NUL
  5c537b3 shim: Flush the memory region from i-cache before execution
  2d4ebb5 load_cert_file: Fix stack issue
  ea4911c load_cert_file: Use EFI RT memory function
  0cf43ac Add -malign-double to IA32 compiler flags
  17f0233 pe: Fix image section entry-point validation
  5169769 make-archive: Build reproducible tarball
  aa1b289 mok: remove MokListTrusted from PCR 7
  53509ea CryptoPkg/BaseCryptLib: fix NULL dereference
  616c566 More coverity modeling
  ea0d0a5 Update shim's .sbat to sbat,3
  dd8be98 Bump grub's sbat requirement to grub,3
  1149161 (HEAD -&gt; main, tag: 15.7, origin/main, origin/HEAD) Update version to 15.7
  - 15.7 release note https://github.com/rhboot/shim/releases
  Make SBAT variable payload introspectable by @chrisccoulson in #483
  Reference MokListRT instead of MokList by @esnowberg in #488
  Add a link to the test plan in the readme. by @vathpela in #494
  [V3] Enable TDX measurement to RTMR register by @kenplusplus in #485
  Discard load-options that start with a NUL by @frozencemetery in #505
  load_cert_file bugs by @esnowberg in #523
  Add -malign-double to IA32 compiler flags by @nicholasbishop in #516
  pe: Fix image section entry-point validation by @iokomin in #518
  make-archive: Build reproducible tarball by @julian-klode in #527
  mok: remove MokListTrusted from PCR 7 by @baloo in #519
  - Drop upstreamed patch:
  - shim-bsc1177789-fix-null-pointer-deref-AuthenticodeVerify.patch
  - Cryptlib/CryptAuthenticode: fix NULL pointer dereference in  AuthenticodeVerify()
  - 53509eaf22	15.7
  - shim-jscPED-127-upgrade-shim-in-SLE15-SP5.patch
  - For backporting the following patches between 15.6 with aa1b289a1a (jsc#PED-127)
  - The following patches are merged to 15.7
  aa1b289a1a mok: remove MokListTrusted from PCR 7
  0cf43ac6d7 Add -malign-double to IA32 compiler flags
  ea4911c2f3 load_cert_file: Use EFI RT memory function
  2d4ebb5a79 load_cert_file: Fix stack issue
  5c537b3d0c shim: Flush the memory region from i-cache before execution
  14d6339829 Discard load-options that start with a NUL
  092c2b2bbe Reference MokListRT instead of MokList
  0eb07e11b2 Make SBAT variable payload introspectable</changelog>
  <changelog author="jlee@suse.com" date="1668772800">- Drop upstreamed patch:
  - shim-Enable-TDX-measurement-to-RTMR-register.patch
  - Enable TDX measurement to RTMR register (jsc#PED-1273)
  - 4fd484e4c2	15.7</changelog>
  <changelog author="jlee@suse.com" date="1668772801">- Add shim-Enable-the-NX-compatibility-flag-by-default.patch to
  enable the NX compatibility flag by default. (jsc#PED-127)</changelog>
  <changelog author="jlee@suse.com" date="1669204800">- Add POST_PROCESS_PE_FLAGS=-N to the build command in shim.spec to
  disable the NX compatibility flag when using post-process-pe because
  grub2 is not ready. (bsc#1205588)
  - Kernel can boot with the NX compatibility flag since 82e0d6d76a2a7
    be merged to v5.19. On the other hand, upstream is working on
    improve compressed kernel stage for NX:
    [PATCH v3 00/24] x86_64: Improvements at compressed kernel stage
    https://www.spinics.net/lists/kernel/msg4599636.html</changelog>
  <changelog author="jlee@suse.com" date="1679400000">- Updated shim signature after shim 15.7 be signed back:
  signature-sles.x86_64.asc, signature-sles.aarch64.asc (bsc#1198458, CVE-2022-28737)</changelog>
  <changelog author="jlee@suse.com" date="1681387200">- Upgrade shim-install for bsc#1210382
  After closing Leap-gap project since Leap 15.3, openSUSE Leap direct
  uses shim from SLE. So the ca_string is 'SUSE Linux Enterprise Secure Boot
  CA1', not 'openSUSE Secure Boot CA1'. It causes that the update_boot=no,
  so all files in /boot/efi/EFI/boot are not updated.
  The 86b73d1 patch added the logic that using ID field in os-release for
  checking Leap distro and set ca_string to 'SUSE Linux Enterprise Secure
  Boot CA1'. Then /boot/efi/EFI/boot/* can also be updated.
- https://github.com/SUSE/shim-resources (git log --oneline)
  86b73d1 Fix that bootx64.efi is not updated on Leap
  f2e8143 Use the long name to specify the grub2 key protector
  7283012 cryptodisk: support TPM authorized policies
  49e7a0d Do not use tpm_record_pcrs unless the command is in command.lst
  26c6bd5 Have grub take a snapshot of "relevant" TPM PCRs
  5c2c3ad Handle different cases of controlling cryptomount volumes during first stage boot
  a5c5734 Introduce --no-grub-install option</changelog>
  <changelog author="jlee@suse.com" date="1681387201">- Sometimes SLE shim signature be Microsoft updated before openSUSE shim
  signature. When submit request on IBS for updating SLE shim, the submitreq
  project be generated, but it always be blocked by checking the signature
  of openSUSE shim.
  It doesn't make sense checking openSUSE shim signature when building
  SLE shim on SLE platform, and vice versa. So the following change adds the
  logic to compare suffix (sles, opensuse) with distro_id (sle, opensuse).
  When and only when hash mismatch and distro_id match with suffix, stop
  building.
    [#] compare suffix (sles, opensuse) with distro_id (sle, opensuse)
    [#] when hash mismatch and distro_id match with suffix, stop building</changelog>
  <changelog author="jlee@suse.com" date="1682078400">- Updated shim.changes to add CVE-2022-28737 number for bsc#1198458.
  The issue be fixed by upgrade to shim 15.7. (bsc#1198458, CVE-2022-28737)</changelog>
</package>
<package pkgid="87c8f37d815da07a984e9ffe7ab69af3b02e690b84f0677d0c92ada2ffc9b4a5" name="shim" arch="src">
  <version epoch="0" ver="15.7" rel="150300.4.16.1"/>
  <changelog author="jsegitz@suse.com" date="1626350400">- Update the SLE signatures (sync shim.changes from SLE)</changelog>
  <changelog author="lnussel@suse.de" date="1649764800">- use common SBAT values (boo#1193282)</changelog>
  <changelog author="jlee@suse.com" date="1656417600">- Update to 15.6 (bsc#1198458)
  - shim-15.6.tar.bz2 is downloaded from bsc#1198458#c76
    which is from upstream grub2.cve_2021_3695.ms keybase channel.
  - For building 15.6~rc1 aarch64 image (d6eb9c6 Modernize aarch64), objcopy needs to
    support efi-app-aarch64 target. So we need the following patches in bintuils:
  - binutils-AArch64-Add-support-for-AArch64-EFI-efi-aarch64.patch
    b69c9d41e8 AArch64: Add support for AArch64 EFI (efi-*-aarch64).
  - binutils-Re-AArch64-Add-support-for-AArch64-EFI-efi-aarch64.patch
    32384aa396 Re: AArch64: Add support for AArch64 EFI (efi-*-aarch64)
  - binutils-Re-Add-support-for-AArch64-EFI-efi-aarch64.patch
    d91c67e873 Re: Add support for AArch64 EFI (efi-*-aarch64)
  - Patches (git log --oneline --reverse 15.5~..77144e5a4)
    448f096 MokManager: removed Locate graphic output protocol fail error message (bsc#1193315, bsc#1198458)
    a2da05f shim: implement SBAT verification for the shim_lock protocol
    bda03b8 post-process-pe: Fix a missing return code check
    af18810 CI: don't cancel testing when one fails
    ba580f9 CI: remove EOL Fedoras from github actions
    bfeb4b3 Remove aarch64 build tests before f35
    38cc646 CI: Add f36 and centos9 CI build tests.
    b5185cb post-process-pe: Fix format string warnings on 32-bit platforms
    31094e5 tests: also look for system headers in multi-arch directories
    4df989a mock-variables.c: fix gcc warning
    6aac595 test-str.c: fix gcc warnings with FORTIFY_SOURCE enabled
    2670c6a Allow MokListTrusted to be enabled by default
    5c44aaf Add code of conduct
    d6eb9c6 Modernize aarch64
    9af50c1 Use ASCII as fallback if Unicode Box Drawing characters fail
    de87985 make: don't treat cert.S specially
    803dc5c shim: use SHIM_DEVEL_VERBOSE when built in devel mode
    6402f1f SBAT matching: Break out of the inner sbat loop if we find the entry.
    bb4b60e Add verify_image
    acfd48f Abstract out image reading
    35d7378 Load additional certs from a signed binary
    8ce2832 post-process-pe: there is no 's' argument.
    465663e Add some missing PE image flag definitions
    226fee2 PE Loader: support and require NX
    df96f48 Add MokPolicy variable and MOK_POLICY_REQUIRE_NX
    b104fc4 post-process-pe: set EFI_IMAGE_DLLCHARACTERISTICS_NX_COMPAT
    f81a7cc SBAT revocation management
    abe41ab make: unbreak scan-build again for gnu-efi
    610a1ac sbat.h: minor reformatting for legibility
    f28833f peimage.h: make our signature macros force the type
    5d789ca Always initialize data/datasize before calling read_image()
    a50d364 sbat policy: make our policy change actions symbolic
    5868789 load_certs: trust dir-&gt;Read() slightly less.
    a78673b mok.c: fix a trivial dead assignment
    759f061 Fix preserve_sbat_uefi_variable() logic
    aa61fdf Give the Coverity scanner some more GCC blinders...
    0214cd9 load_cert_file(): don't defererence NULL
    1eca363 mok import: handle OOM case
    75449bc sbat: Make nth_sbat_field() honor the size limit
    c0bcd04 shim-15.6~rc1
    77144e5 SBAT Policy latest should be a one-shot
  - 15.5 release note https://github.com/rhboot/shim/releases
  Broken ia32 relocs and an unimportant submodule change. by @vathpela in #357
  mok: allocate MOK config table as BootServicesData by @lcp in #361
  Don't call QueryVariableInfo() on EFI 1.10 machines by @vathpela in #364
  Relax the check for import_mok_state() by @lcp in #372
  SBAT.md: trivial changes by @hallyn in #389
  shim: another attempt to fix load options handling by @chrisccoulson in #379
  Add tests for our load options parsing. by @vathpela in #390
  arm/aa64: fix the size of .rela* sections by @lcp in #383
  mok: fix potential buffer overrun in import_mok_state by @jyong2 in #365
  mok: relax the maximum variable size check by @lcp in #369
  Don't unhook ExitBootServices when EBS protection is disabled by @sforshee in #378
  fallback: find_boot_option() needs to return the index for the boot entry in optnum by @jsetje in #396
  httpboot: Ignore case when checking HTTP headers by @frozencemetery in #403
  Fallback allocation errors by @vathpela in #402
  shim: avoid BOOTx64.EFI in message on other architectures by @xypron in #406
  str: remove duplicate parameter check by @xypron in #408
  fallback: add compile option FALLBACK_NONINTERACTIVE by @xnox in #359
  Test mok mirror by @vathpela in #394
  Modify sbat.md to help with readability. by @eshiman in #398
  csv: detect end of csv file correctly by @xypron in #404
  Specify that the .sbat section is ASCII not UTF-8 by @daxtens in #413
  tests: add "include-fixed" GCC directory to include directories by @diabonas in #415
  pe: simplify generate_hash() by @xypron in #411
  Don't make shim abort when TPM log event fails (RHBZ #2002265) by @rmetrich in #414
  Fallback to default loader if parsed one does not exist by @julian-klode in #393
  fallback: Fix for BootOrder crash when index returned by find_boot_option() is not in current BootOrder list by @rmetrich in #422
  Better console checks by @vathpela in #416
  docs: update SBAT UEFI variable name by @nicholasbishop in #421
  Don't parse load options if invoked from removable media path by @julian-klode in #399
  fallback: fix fallback not passing arguments of the first boot option by @martinezjavier in #433
  shim: Don't stop forever at "Secure Boot not enabled" notification by @rmetrich in #438
  Shim 15.5 coverity by @vathpela in #439
  Allocate mokvar table in runtime memory. by @vathpela in #447
  Remove post-process-pe on 'make clean' by @vathpela in #448
  pe: missing perror argument by @xypron in #443
  - 15.6-rc1 release note https://github.com/rhboot/shim/releases
  MokManager: removed Locate graphic output protocol fail error message by @joeyli in #441
  shim: implement SBAT verification for the shim_lock protocol by @chrisccoulson in #456
  post-process-pe: Fix a missing return code check by @vathpela in #462
  Update github actions matrix to be more useful by @frozencemetery in #469
  Add f36 and centos9 CI builds by @vathpela in #470
  post-process-pe: Fix format string warnings on 32-bit platforms by @steve-mcintyre in #464
  tests: also look for system headers in multi-arch directories by @steve-mcintyre in #466
  tests: fix gcc warnings by @akodanev in #463
  Allow MokListTrusted to be enabled by default by @esnowberg in #455
  Add code of conduct by @frozencemetery in #427
  Re-add ARM AArch64 support by @vathpela in #468
  Use ASCII as fallback if Unicode Box Drawing characters fail by @vathpela in #428
  make: don't treat cert.S specially by @vathpela in #475
  shim: use SHIM_DEVEL_VERBOSE when built in devel mode by @vathpela in #474
  Break out of the inner sbat loop if we find the entry. by @vathpela in #476
  Support loading additional certificates by @esnowberg in #446
  Add support for NX (W^X) mitigations. by @vathpela in #459
  Misc fixups from scan-build. by @vathpela in #477
  Fix preserve_sbat_uefi_variable() logic by @jsetje in #478
  - 15.6 release note https://github.com/rhboot/shim/releases
  MokManager: removed Locate graphic output protocol fail error message by @joeyli in #441
  shim: implement SBAT verification for the shim_lock protocol by @chrisccoulson in #456
  post-process-pe: Fix a missing return code check by @vathpela in #462
  Update github actions matrix to be more useful by @frozencemetery in #469
  Add f36 and centos9 CI builds by @vathpela in #470
  post-process-pe: Fix format string warnings on 32-bit platforms by @steve-mcintyre in #464
  tests: also look for system headers in multi-arch directories by @steve-mcintyre in #466
  tests: fix gcc warnings by @akodanev in #463
  Allow MokListTrusted to be enabled by default by @esnowberg in #455
  Add code of conduct by @frozencemetery in #427
  Re-add ARM AArch64 support by @vathpela in #468
  Use ASCII as fallback if Unicode Box Drawing characters fail by @vathpela in #428
  make: don't treat cert.S specially by @vathpela in #475
  shim: use SHIM_DEVEL_VERBOSE when built in devel mode by @vathpela in #474
  Break out of the inner sbat loop if we find the entry. by @vathpela in #476
  Support loading additional certificates by @esnowberg in #446
  Add support for NX (W^X) mitigations. by @vathpela in #459
  Misc fixups from scan-build. by @vathpela in #477
  Fix preserve_sbat_uefi_variable() logic by @jsetje in #478
  SBAT Policy latest should be a one-shot by @jsetje in #481
  pe: Fix a buffer overflow when SizeOfRawData &gt; VirtualSize by @chriscoulson
  pe: Perform image verification earlier when loading grub by @chriscoulson
  Update advertised sbat generation number for shim by @jsetje
  Update SBAT generation requirements for 05/24/22 by @jsetje
  Also avoid CVE-2022-28737 in verify_image() by @vathpela
  - Drop upstreamed patch:
  - shim-bsc1184454-allocate-mok-config-table-BS.patch
  - Allocate MOK config table as BootServicesData to avoid the error message
  from linux kernel
  - 4068fd42c8		15.5-rc1~70
  - shim-bsc1185441-fix-handling-of-ignore_db-and-user_insecure_mode.patch
  - Handle ignore_db and user_insecure_mode correctly
  - 822d07ad4f07		15.5-rc1~73
  - shim-bsc1185621-relax-max-var-sz-check.patch
  - Relax the maximum variable size check for u-boot
  - 3f327f546c219634b2	15.5-rc1~49
  - shim-bsc1185261-relax-import_mok_state-check.patch
  - Relax the check for import_mok_state() when Secure Boot is off
  - 9f973e4e95b113	15.5-rc1~67
  - shim-bsc1185232-relax-loadoptions-length-check.patch
  - Relax the check for the LoadOptions length
  - ada7ff69bd8a95	15.5-rc1~52
  - shim-fix-aa64-relsz.patch
  - Fix the size of rela* sections for AArch64
  - 34e3ef205c5d65	15.5-rc1~51
  - shim-bsc1187260-fix-efi-1.10-machines.patch
  - Don't call QueryVariableInfo() on EFI 1.10 machines
  - 493bd940e5		15.5-rc1~69
  - shim-bsc1185232-fix-config-table-copying.patch
  - Avoid buffer overflow when copying the MOK config table
  - 7501b6bb44		15.5-rc1~50
  - shim-bsc1187696-avoid-deleting-rt-variables.patch
  - Avoid deleting the mirrored RT variables
  - b1fead0f7c9		15.5-rc1~37
  - Add "rm -f *.o" after building MokManager/fallback in shim.spec
    to make sure all object files gets rebuilt
  - reference: https://github.com/rhboot/shim/pull/461
- The following fix-CVE-2022-28737-v6 patches against bsc#1198458 are included
  in shim-15.6.tar.bz2
  - shim-bsc1198458-pe-Fix-a-buffer-overflow-when-SizeOfRawData-VirtualS.patch
    pe: Fix a buffer overflow when SizeOfRawData VirtualSize
  - shim-bsc1198458-pe-Perform-image-verification-earlier-when-loading-g.patch
    pe: Perform image verification earlier when loading grub
  - shim-bsc1198458-Update-advertised-sbat-generation-number-for-shim.patch
    Update advertised sbat generation number for shim
  - shim-bsc1198458-Update-SBAT-generation-requirements-for-05-24-22.patch
    Update SBAT generation requirements for 05/24/22
  - shim-bsc1198458-Also-avoid-CVE-2022-28737-in-verify_image.patch
    Also avoid CVE-2022-28737 in verify_image()
  - 0006-shim-15.6-rc2.patch
  - 0007-sbat-add-the-parsed-SBAT-variable-entries-to-the-deb.patch
    sbat: add the parsed SBAT variable entries to the debug log
  - 0008-bump-version-to-shim-15.6.patch
- Add mokutil command to post script for setting sbat policy to latest mode
  when the SbatPolicy-605dab50-e046-4300-abb6-3dd810dd8b23 is not created.
  (bsc#1198458)
- Add shim-bsc1198101-opensuse-cert-prompt.patch back to openSUSE shim to
  show the prompt to ask whether the user trusts openSUSE certificate or not
  (bsc#1198101)
- Updated vendor dbx binary and script (bsc#1198458)
  - Updated dbx-cert.tar.xz and vendor-dbx-sles.bin for adding
    SLES-UEFI-SIGN-Certificate-2021-05.crt to vendor dbx list.
  - Updated dbx-cert.tar.xz and vendor-dbx-opensuse.bin for adding
    openSUSE-UEFI-SIGN-Certificate-2021-05.crt to vendor dbx list.
  - Updated vendor-dbx.bin for adding SLES-UEFI-SIGN-Certificate-2021-05.crt
    and openSUSE-UEFI-SIGN-Certificate-2021-05.crt for testing environment.
  - Updated generate-vendor-dbx.sh script for generating a vendor-dbx.bin
    file which includes all .der for testing environment.</changelog>
  <changelog author="jlee@suse.com" date="1658750400">- Revoked the change in shim.spec for "use common SBAT values (boo#1193282)"
  - we need to build openSUSE Tumbleweed's shim on Leap 15.4 because Factory
    is unstable for building out a stable shim binary for signing. (bsc#1198458)
  - But the rpm-config-suse package in Leap 15.4 is direct copied from SLE 15.4
    because closing-the-leap-gap. So sbat_distro_* variables are SLE version,
    not for openSUSE. (bsc#1198458)</changelog>
  <changelog author="jlee@suse.com" date="1659096000">- Change the URL in SBAT section to mail:security@suse.de. (bsc#1193282)</changelog>
  <changelog author="jlee@suse.com" date="1659700800">- Add logic to shim.spec for detecting --set-sbat-policy option before
  using mokutil to set sbat policy. (bsc#1202120)</changelog>
  <changelog author="khanich.opensource@gmx.de" date="1662984000">- Add logic to shim.spec to only set sbat policy when efivarfs is writeable.
  (bsc#1201066)</changelog>
  <changelog author="mchang@suse.com" date="1664452800">- shim-install: ensure grub.cfg created is not overwritten after
  installing grub related files</changelog>
  <changelog author="jlee@suse.com" date="1668513600">- For pushing openSUSE:Factory/shim to SLE15-SP5, sync the shim.spec
  and shim.changes: (jsc#PED-127)
  - Add some change log from SLE shim.changes to Factory shim.changes
    Those messages are added "(sync shim.changes from SLE)" tag.
  - Add the following changes to shim.spec
  - only apply Patch100, the shim-bsc1198101-opensuse-cert-prompt.patch
    on openSUSE.
  - Enable the AArch64 signature check for SLE:
  [#] AArch64 signature
  signature=%{SOURCE13}</changelog>
  <changelog author="jlee@suse.com" date="1668513601">- Add shim-Enable-TDX-measurement-to-RTMR-register.patch to support
  enhance shim measurement to TD RTMR. (jsc#PED-1273)</changelog>
  <changelog author="jlee@suse.com" date="1668513602">- Add shim-jscPED-127-upgrade-shim-in-SLE15-SP5.patch for backporting the following
  patches between 15.6 with aa1b289a1a (jsc#PED-127):
    aa1b289a1a16774afc3143b8948d97261f0872d0 mok: remove MokListTrusted from PCR 7
    0cf43ac6d78c6f47f8b91210639ac1aa63665f0b Add -malign-double to IA32 compiler flags
    ea4911c2f3ce8f8f703a1476febac86bb16b00fd load_cert_file: Use EFI RT memory function
    2d4ebb5a798aafd3b06d2c3cb9c9840c1caa41ef load_cert_file: Fix stack issue
    5c537b3d0cf8c393dad2e61d49aade68f3af1401 shim: Flush the memory region from i-cache before execution
    14d63398298c8de23036a4cf61594108b7345863 Discard load-options that start with a NUL
    092c2b2bbed950727e41cf450b61c794881c33e7 Reference MokListRT instead of MokList
    0eb07e11b20680200d3ce9c5bc59299121a75388 Make SBAT variable payload introspectable</changelog>
  <changelog author="jlee@suse.com" date="1668686400">- Update shim.changes, added missed shim 15.6-rc1 and 15.6 changelog to
  the item in Update to 15.6. (bsc#1198458)</changelog>
  <changelog author="jlee@suse.com" date="1668686401">- Update to 15.7 (bsc#1198458)(jsc#PED-127)
  - Patches (git log --oneline --reverse 15.6..15.7)
  0eb07e1 Make SBAT variable payload introspectable
  092c2b2 Reference MokListRT instead of MokList
  8b59b69 Add a link to the test plan in the readme.
  4fd484e Enable TDX measurement to RTMR register
  14d6339 Discard load-options that start with a NUL
  5c537b3 shim: Flush the memory region from i-cache before execution
  2d4ebb5 load_cert_file: Fix stack issue
  ea4911c load_cert_file: Use EFI RT memory function
  0cf43ac Add -malign-double to IA32 compiler flags
  17f0233 pe: Fix image section entry-point validation
  5169769 make-archive: Build reproducible tarball
  aa1b289 mok: remove MokListTrusted from PCR 7
  53509ea CryptoPkg/BaseCryptLib: fix NULL dereference
  616c566 More coverity modeling
  ea0d0a5 Update shim's .sbat to sbat,3
  dd8be98 Bump grub's sbat requirement to grub,3
  1149161 (HEAD -&gt; main, tag: 15.7, origin/main, origin/HEAD) Update version to 15.7
  - 15.7 release note https://github.com/rhboot/shim/releases
  Make SBAT variable payload introspectable by @chrisccoulson in #483
  Reference MokListRT instead of MokList by @esnowberg in #488
  Add a link to the test plan in the readme. by @vathpela in #494
  [V3] Enable TDX measurement to RTMR register by @kenplusplus in #485
  Discard load-options that start with a NUL by @frozencemetery in #505
  load_cert_file bugs by @esnowberg in #523
  Add -malign-double to IA32 compiler flags by @nicholasbishop in #516
  pe: Fix image section entry-point validation by @iokomin in #518
  make-archive: Build reproducible tarball by @julian-klode in #527
  mok: remove MokListTrusted from PCR 7 by @baloo in #519
  - Drop upstreamed patch:
  - shim-bsc1177789-fix-null-pointer-deref-AuthenticodeVerify.patch
  - Cryptlib/CryptAuthenticode: fix NULL pointer dereference in  AuthenticodeVerify()
  - 53509eaf22	15.7
  - shim-jscPED-127-upgrade-shim-in-SLE15-SP5.patch
  - For backporting the following patches between 15.6 with aa1b289a1a (jsc#PED-127)
  - The following patches are merged to 15.7
  aa1b289a1a mok: remove MokListTrusted from PCR 7
  0cf43ac6d7 Add -malign-double to IA32 compiler flags
  ea4911c2f3 load_cert_file: Use EFI RT memory function
  2d4ebb5a79 load_cert_file: Fix stack issue
  5c537b3d0c shim: Flush the memory region from i-cache before execution
  14d6339829 Discard load-options that start with a NUL
  092c2b2bbe Reference MokListRT instead of MokList
  0eb07e11b2 Make SBAT variable payload introspectable</changelog>
  <changelog author="jlee@suse.com" date="1668772800">- Drop upstreamed patch:
  - shim-Enable-TDX-measurement-to-RTMR-register.patch
  - Enable TDX measurement to RTMR register (jsc#PED-1273)
  - 4fd484e4c2	15.7</changelog>
  <changelog author="jlee@suse.com" date="1668772801">- Add shim-Enable-the-NX-compatibility-flag-by-default.patch to
  enable the NX compatibility flag by default. (jsc#PED-127)</changelog>
  <changelog author="jlee@suse.com" date="1669204800">- Add POST_PROCESS_PE_FLAGS=-N to the build command in shim.spec to
  disable the NX compatibility flag when using post-process-pe because
  grub2 is not ready. (bsc#1205588)
  - Kernel can boot with the NX compatibility flag since 82e0d6d76a2a7
    be merged to v5.19. On the other hand, upstream is working on
    improve compressed kernel stage for NX:
    [PATCH v3 00/24] x86_64: Improvements at compressed kernel stage
    https://www.spinics.net/lists/kernel/msg4599636.html</changelog>
  <changelog author="jlee@suse.com" date="1679400000">- Updated shim signature after shim 15.7 be signed back:
  signature-sles.x86_64.asc, signature-sles.aarch64.asc (bsc#1198458, CVE-2022-28737)</changelog>
  <changelog author="jlee@suse.com" date="1681387200">- Upgrade shim-install for bsc#1210382
  After closing Leap-gap project since Leap 15.3, openSUSE Leap direct
  uses shim from SLE. So the ca_string is 'SUSE Linux Enterprise Secure Boot
  CA1', not 'openSUSE Secure Boot CA1'. It causes that the update_boot=no,
  so all files in /boot/efi/EFI/boot are not updated.
  The 86b73d1 patch added the logic that using ID field in os-release for
  checking Leap distro and set ca_string to 'SUSE Linux Enterprise Secure
  Boot CA1'. Then /boot/efi/EFI/boot/* can also be updated.
- https://github.com/SUSE/shim-resources (git log --oneline)
  86b73d1 Fix that bootx64.efi is not updated on Leap
  f2e8143 Use the long name to specify the grub2 key protector
  7283012 cryptodisk: support TPM authorized policies
  49e7a0d Do not use tpm_record_pcrs unless the command is in command.lst
  26c6bd5 Have grub take a snapshot of "relevant" TPM PCRs
  5c2c3ad Handle different cases of controlling cryptomount volumes during first stage boot
  a5c5734 Introduce --no-grub-install option</changelog>
  <changelog author="jlee@suse.com" date="1681387201">- Sometimes SLE shim signature be Microsoft updated before openSUSE shim
  signature. When submit request on IBS for updating SLE shim, the submitreq
  project be generated, but it always be blocked by checking the signature
  of openSUSE shim.
  It doesn't make sense checking openSUSE shim signature when building
  SLE shim on SLE platform, and vice versa. So the following change adds the
  logic to compare suffix (sles, opensuse) with distro_id (sle, opensuse).
  When and only when hash mismatch and distro_id match with suffix, stop
  building.
    [#] compare suffix (sles, opensuse) with distro_id (sle, opensuse)
    [#] when hash mismatch and distro_id match with suffix, stop building</changelog>
  <changelog author="jlee@suse.com" date="1682078400">- Updated shim.changes to add CVE-2022-28737 number for bsc#1198458.
  The issue be fixed by upgrade to shim 15.7. (bsc#1198458, CVE-2022-28737)</changelog>
</package>
<package pkgid="941b1c59a01ac433c1d4d4c3b4596c238da7cb91c1c6eefbee53831d841b6166" name="shim" arch="x86_64">
  <version epoch="0" ver="15.7" rel="150300.4.16.1"/>
  <changelog author="jsegitz@suse.com" date="1626350400">- Update the SLE signatures (sync shim.changes from SLE)</changelog>
  <changelog author="lnussel@suse.de" date="1649764800">- use common SBAT values (boo#1193282)</changelog>
  <changelog author="jlee@suse.com" date="1656417600">- Update to 15.6 (bsc#1198458)
  - shim-15.6.tar.bz2 is downloaded from bsc#1198458#c76
    which is from upstream grub2.cve_2021_3695.ms keybase channel.
  - For building 15.6~rc1 aarch64 image (d6eb9c6 Modernize aarch64), objcopy needs to
    support efi-app-aarch64 target. So we need the following patches in bintuils:
  - binutils-AArch64-Add-support-for-AArch64-EFI-efi-aarch64.patch
    b69c9d41e8 AArch64: Add support for AArch64 EFI (efi-*-aarch64).
  - binutils-Re-AArch64-Add-support-for-AArch64-EFI-efi-aarch64.patch
    32384aa396 Re: AArch64: Add support for AArch64 EFI (efi-*-aarch64)
  - binutils-Re-Add-support-for-AArch64-EFI-efi-aarch64.patch
    d91c67e873 Re: Add support for AArch64 EFI (efi-*-aarch64)
  - Patches (git log --oneline --reverse 15.5~..77144e5a4)
    448f096 MokManager: removed Locate graphic output protocol fail error message (bsc#1193315, bsc#1198458)
    a2da05f shim: implement SBAT verification for the shim_lock protocol
    bda03b8 post-process-pe: Fix a missing return code check
    af18810 CI: don't cancel testing when one fails
    ba580f9 CI: remove EOL Fedoras from github actions
    bfeb4b3 Remove aarch64 build tests before f35
    38cc646 CI: Add f36 and centos9 CI build tests.
    b5185cb post-process-pe: Fix format string warnings on 32-bit platforms
    31094e5 tests: also look for system headers in multi-arch directories
    4df989a mock-variables.c: fix gcc warning
    6aac595 test-str.c: fix gcc warnings with FORTIFY_SOURCE enabled
    2670c6a Allow MokListTrusted to be enabled by default
    5c44aaf Add code of conduct
    d6eb9c6 Modernize aarch64
    9af50c1 Use ASCII as fallback if Unicode Box Drawing characters fail
    de87985 make: don't treat cert.S specially
    803dc5c shim: use SHIM_DEVEL_VERBOSE when built in devel mode
    6402f1f SBAT matching: Break out of the inner sbat loop if we find the entry.
    bb4b60e Add verify_image
    acfd48f Abstract out image reading
    35d7378 Load additional certs from a signed binary
    8ce2832 post-process-pe: there is no 's' argument.
    465663e Add some missing PE image flag definitions
    226fee2 PE Loader: support and require NX
    df96f48 Add MokPolicy variable and MOK_POLICY_REQUIRE_NX
    b104fc4 post-process-pe: set EFI_IMAGE_DLLCHARACTERISTICS_NX_COMPAT
    f81a7cc SBAT revocation management
    abe41ab make: unbreak scan-build again for gnu-efi
    610a1ac sbat.h: minor reformatting for legibility
    f28833f peimage.h: make our signature macros force the type
    5d789ca Always initialize data/datasize before calling read_image()
    a50d364 sbat policy: make our policy change actions symbolic
    5868789 load_certs: trust dir-&gt;Read() slightly less.
    a78673b mok.c: fix a trivial dead assignment
    759f061 Fix preserve_sbat_uefi_variable() logic
    aa61fdf Give the Coverity scanner some more GCC blinders...
    0214cd9 load_cert_file(): don't defererence NULL
    1eca363 mok import: handle OOM case
    75449bc sbat: Make nth_sbat_field() honor the size limit
    c0bcd04 shim-15.6~rc1
    77144e5 SBAT Policy latest should be a one-shot
  - 15.5 release note https://github.com/rhboot/shim/releases
  Broken ia32 relocs and an unimportant submodule change. by @vathpela in #357
  mok: allocate MOK config table as BootServicesData by @lcp in #361
  Don't call QueryVariableInfo() on EFI 1.10 machines by @vathpela in #364
  Relax the check for import_mok_state() by @lcp in #372
  SBAT.md: trivial changes by @hallyn in #389
  shim: another attempt to fix load options handling by @chrisccoulson in #379
  Add tests for our load options parsing. by @vathpela in #390
  arm/aa64: fix the size of .rela* sections by @lcp in #383
  mok: fix potential buffer overrun in import_mok_state by @jyong2 in #365
  mok: relax the maximum variable size check by @lcp in #369
  Don't unhook ExitBootServices when EBS protection is disabled by @sforshee in #378
  fallback: find_boot_option() needs to return the index for the boot entry in optnum by @jsetje in #396
  httpboot: Ignore case when checking HTTP headers by @frozencemetery in #403
  Fallback allocation errors by @vathpela in #402
  shim: avoid BOOTx64.EFI in message on other architectures by @xypron in #406
  str: remove duplicate parameter check by @xypron in #408
  fallback: add compile option FALLBACK_NONINTERACTIVE by @xnox in #359
  Test mok mirror by @vathpela in #394
  Modify sbat.md to help with readability. by @eshiman in #398
  csv: detect end of csv file correctly by @xypron in #404
  Specify that the .sbat section is ASCII not UTF-8 by @daxtens in #413
  tests: add "include-fixed" GCC directory to include directories by @diabonas in #415
  pe: simplify generate_hash() by @xypron in #411
  Don't make shim abort when TPM log event fails (RHBZ #2002265) by @rmetrich in #414
  Fallback to default loader if parsed one does not exist by @julian-klode in #393
  fallback: Fix for BootOrder crash when index returned by find_boot_option() is not in current BootOrder list by @rmetrich in #422
  Better console checks by @vathpela in #416
  docs: update SBAT UEFI variable name by @nicholasbishop in #421
  Don't parse load options if invoked from removable media path by @julian-klode in #399
  fallback: fix fallback not passing arguments of the first boot option by @martinezjavier in #433
  shim: Don't stop forever at "Secure Boot not enabled" notification by @rmetrich in #438
  Shim 15.5 coverity by @vathpela in #439
  Allocate mokvar table in runtime memory. by @vathpela in #447
  Remove post-process-pe on 'make clean' by @vathpela in #448
  pe: missing perror argument by @xypron in #443
  - 15.6-rc1 release note https://github.com/rhboot/shim/releases
  MokManager: removed Locate graphic output protocol fail error message by @joeyli in #441
  shim: implement SBAT verification for the shim_lock protocol by @chrisccoulson in #456
  post-process-pe: Fix a missing return code check by @vathpela in #462
  Update github actions matrix to be more useful by @frozencemetery in #469
  Add f36 and centos9 CI builds by @vathpela in #470
  post-process-pe: Fix format string warnings on 32-bit platforms by @steve-mcintyre in #464
  tests: also look for system headers in multi-arch directories by @steve-mcintyre in #466
  tests: fix gcc warnings by @akodanev in #463
  Allow MokListTrusted to be enabled by default by @esnowberg in #455
  Add code of conduct by @frozencemetery in #427
  Re-add ARM AArch64 support by @vathpela in #468
  Use ASCII as fallback if Unicode Box Drawing characters fail by @vathpela in #428
  make: don't treat cert.S specially by @vathpela in #475
  shim: use SHIM_DEVEL_VERBOSE when built in devel mode by @vathpela in #474
  Break out of the inner sbat loop if we find the entry. by @vathpela in #476
  Support loading additional certificates by @esnowberg in #446
  Add support for NX (W^X) mitigations. by @vathpela in #459
  Misc fixups from scan-build. by @vathpela in #477
  Fix preserve_sbat_uefi_variable() logic by @jsetje in #478
  - 15.6 release note https://github.com/rhboot/shim/releases
  MokManager: removed Locate graphic output protocol fail error message by @joeyli in #441
  shim: implement SBAT verification for the shim_lock protocol by @chrisccoulson in #456
  post-process-pe: Fix a missing return code check by @vathpela in #462
  Update github actions matrix to be more useful by @frozencemetery in #469
  Add f36 and centos9 CI builds by @vathpela in #470
  post-process-pe: Fix format string warnings on 32-bit platforms by @steve-mcintyre in #464
  tests: also look for system headers in multi-arch directories by @steve-mcintyre in #466
  tests: fix gcc warnings by @akodanev in #463
  Allow MokListTrusted to be enabled by default by @esnowberg in #455
  Add code of conduct by @frozencemetery in #427
  Re-add ARM AArch64 support by @vathpela in #468
  Use ASCII as fallback if Unicode Box Drawing characters fail by @vathpela in #428
  make: don't treat cert.S specially by @vathpela in #475
  shim: use SHIM_DEVEL_VERBOSE when built in devel mode by @vathpela in #474
  Break out of the inner sbat loop if we find the entry. by @vathpela in #476
  Support loading additional certificates by @esnowberg in #446
  Add support for NX (W^X) mitigations. by @vathpela in #459
  Misc fixups from scan-build. by @vathpela in #477
  Fix preserve_sbat_uefi_variable() logic by @jsetje in #478
  SBAT Policy latest should be a one-shot by @jsetje in #481
  pe: Fix a buffer overflow when SizeOfRawData &gt; VirtualSize by @chriscoulson
  pe: Perform image verification earlier when loading grub by @chriscoulson
  Update advertised sbat generation number for shim by @jsetje
  Update SBAT generation requirements for 05/24/22 by @jsetje
  Also avoid CVE-2022-28737 in verify_image() by @vathpela
  - Drop upstreamed patch:
  - shim-bsc1184454-allocate-mok-config-table-BS.patch
  - Allocate MOK config table as BootServicesData to avoid the error message
  from linux kernel
  - 4068fd42c8		15.5-rc1~70
  - shim-bsc1185441-fix-handling-of-ignore_db-and-user_insecure_mode.patch
  - Handle ignore_db and user_insecure_mode correctly
  - 822d07ad4f07		15.5-rc1~73
  - shim-bsc1185621-relax-max-var-sz-check.patch
  - Relax the maximum variable size check for u-boot
  - 3f327f546c219634b2	15.5-rc1~49
  - shim-bsc1185261-relax-import_mok_state-check.patch
  - Relax the check for import_mok_state() when Secure Boot is off
  - 9f973e4e95b113	15.5-rc1~67
  - shim-bsc1185232-relax-loadoptions-length-check.patch
  - Relax the check for the LoadOptions length
  - ada7ff69bd8a95	15.5-rc1~52
  - shim-fix-aa64-relsz.patch
  - Fix the size of rela* sections for AArch64
  - 34e3ef205c5d65	15.5-rc1~51
  - shim-bsc1187260-fix-efi-1.10-machines.patch
  - Don't call QueryVariableInfo() on EFI 1.10 machines
  - 493bd940e5		15.5-rc1~69
  - shim-bsc1185232-fix-config-table-copying.patch
  - Avoid buffer overflow when copying the MOK config table
  - 7501b6bb44		15.5-rc1~50
  - shim-bsc1187696-avoid-deleting-rt-variables.patch
  - Avoid deleting the mirrored RT variables
  - b1fead0f7c9		15.5-rc1~37
  - Add "rm -f *.o" after building MokManager/fallback in shim.spec
    to make sure all object files gets rebuilt
  - reference: https://github.com/rhboot/shim/pull/461
- The following fix-CVE-2022-28737-v6 patches against bsc#1198458 are included
  in shim-15.6.tar.bz2
  - shim-bsc1198458-pe-Fix-a-buffer-overflow-when-SizeOfRawData-VirtualS.patch
    pe: Fix a buffer overflow when SizeOfRawData VirtualSize
  - shim-bsc1198458-pe-Perform-image-verification-earlier-when-loading-g.patch
    pe: Perform image verification earlier when loading grub
  - shim-bsc1198458-Update-advertised-sbat-generation-number-for-shim.patch
    Update advertised sbat generation number for shim
  - shim-bsc1198458-Update-SBAT-generation-requirements-for-05-24-22.patch
    Update SBAT generation requirements for 05/24/22
  - shim-bsc1198458-Also-avoid-CVE-2022-28737-in-verify_image.patch
    Also avoid CVE-2022-28737 in verify_image()
  - 0006-shim-15.6-rc2.patch
  - 0007-sbat-add-the-parsed-SBAT-variable-entries-to-the-deb.patch
    sbat: add the parsed SBAT variable entries to the debug log
  - 0008-bump-version-to-shim-15.6.patch
- Add mokutil command to post script for setting sbat policy to latest mode
  when the SbatPolicy-605dab50-e046-4300-abb6-3dd810dd8b23 is not created.
  (bsc#1198458)
- Add shim-bsc1198101-opensuse-cert-prompt.patch back to openSUSE shim to
  show the prompt to ask whether the user trusts openSUSE certificate or not
  (bsc#1198101)
- Updated vendor dbx binary and script (bsc#1198458)
  - Updated dbx-cert.tar.xz and vendor-dbx-sles.bin for adding
    SLES-UEFI-SIGN-Certificate-2021-05.crt to vendor dbx list.
  - Updated dbx-cert.tar.xz and vendor-dbx-opensuse.bin for adding
    openSUSE-UEFI-SIGN-Certificate-2021-05.crt to vendor dbx list.
  - Updated vendor-dbx.bin for adding SLES-UEFI-SIGN-Certificate-2021-05.crt
    and openSUSE-UEFI-SIGN-Certificate-2021-05.crt for testing environment.
  - Updated generate-vendor-dbx.sh script for generating a vendor-dbx.bin
    file which includes all .der for testing environment.</changelog>
  <changelog author="jlee@suse.com" date="1658750400">- Revoked the change in shim.spec for "use common SBAT values (boo#1193282)"
  - we need to build openSUSE Tumbleweed's shim on Leap 15.4 because Factory
    is unstable for building out a stable shim binary for signing. (bsc#1198458)
  - But the rpm-config-suse package in Leap 15.4 is direct copied from SLE 15.4
    because closing-the-leap-gap. So sbat_distro_* variables are SLE version,
    not for openSUSE. (bsc#1198458)</changelog>
  <changelog author="jlee@suse.com" date="1659096000">- Change the URL in SBAT section to mail:security@suse.de. (bsc#1193282)</changelog>
  <changelog author="jlee@suse.com" date="1659700800">- Add logic to shim.spec for detecting --set-sbat-policy option before
  using mokutil to set sbat policy. (bsc#1202120)</changelog>
  <changelog author="khanich.opensource@gmx.de" date="1662984000">- Add logic to shim.spec to only set sbat policy when efivarfs is writeable.
  (bsc#1201066)</changelog>
  <changelog author="mchang@suse.com" date="1664452800">- shim-install: ensure grub.cfg created is not overwritten after
  installing grub related files</changelog>
  <changelog author="jlee@suse.com" date="1668513600">- For pushing openSUSE:Factory/shim to SLE15-SP5, sync the shim.spec
  and shim.changes: (jsc#PED-127)
  - Add some change log from SLE shim.changes to Factory shim.changes
    Those messages are added "(sync shim.changes from SLE)" tag.
  - Add the following changes to shim.spec
  - only apply Patch100, the shim-bsc1198101-opensuse-cert-prompt.patch
    on openSUSE.
  - Enable the AArch64 signature check for SLE:
  [#] AArch64 signature
  signature=%{SOURCE13}</changelog>
  <changelog author="jlee@suse.com" date="1668513601">- Add shim-Enable-TDX-measurement-to-RTMR-register.patch to support
  enhance shim measurement to TD RTMR. (jsc#PED-1273)</changelog>
  <changelog author="jlee@suse.com" date="1668513602">- Add shim-jscPED-127-upgrade-shim-in-SLE15-SP5.patch for backporting the following
  patches between 15.6 with aa1b289a1a (jsc#PED-127):
    aa1b289a1a16774afc3143b8948d97261f0872d0 mok: remove MokListTrusted from PCR 7
    0cf43ac6d78c6f47f8b91210639ac1aa63665f0b Add -malign-double to IA32 compiler flags
    ea4911c2f3ce8f8f703a1476febac86bb16b00fd load_cert_file: Use EFI RT memory function
    2d4ebb5a798aafd3b06d2c3cb9c9840c1caa41ef load_cert_file: Fix stack issue
    5c537b3d0cf8c393dad2e61d49aade68f3af1401 shim: Flush the memory region from i-cache before execution
    14d63398298c8de23036a4cf61594108b7345863 Discard load-options that start with a NUL
    092c2b2bbed950727e41cf450b61c794881c33e7 Reference MokListRT instead of MokList
    0eb07e11b20680200d3ce9c5bc59299121a75388 Make SBAT variable payload introspectable</changelog>
  <changelog author="jlee@suse.com" date="1668686400">- Update shim.changes, added missed shim 15.6-rc1 and 15.6 changelog to
  the item in Update to 15.6. (bsc#1198458)</changelog>
  <changelog author="jlee@suse.com" date="1668686401">- Update to 15.7 (bsc#1198458)(jsc#PED-127)
  - Patches (git log --oneline --reverse 15.6..15.7)
  0eb07e1 Make SBAT variable payload introspectable
  092c2b2 Reference MokListRT instead of MokList
  8b59b69 Add a link to the test plan in the readme.
  4fd484e Enable TDX measurement to RTMR register
  14d6339 Discard load-options that start with a NUL
  5c537b3 shim: Flush the memory region from i-cache before execution
  2d4ebb5 load_cert_file: Fix stack issue
  ea4911c load_cert_file: Use EFI RT memory function
  0cf43ac Add -malign-double to IA32 compiler flags
  17f0233 pe: Fix image section entry-point validation
  5169769 make-archive: Build reproducible tarball
  aa1b289 mok: remove MokListTrusted from PCR 7
  53509ea CryptoPkg/BaseCryptLib: fix NULL dereference
  616c566 More coverity modeling
  ea0d0a5 Update shim's .sbat to sbat,3
  dd8be98 Bump grub's sbat requirement to grub,3
  1149161 (HEAD -&gt; main, tag: 15.7, origin/main, origin/HEAD) Update version to 15.7
  - 15.7 release note https://github.com/rhboot/shim/releases
  Make SBAT variable payload introspectable by @chrisccoulson in #483
  Reference MokListRT instead of MokList by @esnowberg in #488
  Add a link to the test plan in the readme. by @vathpela in #494
  [V3] Enable TDX measurement to RTMR register by @kenplusplus in #485
  Discard load-options that start with a NUL by @frozencemetery in #505
  load_cert_file bugs by @esnowberg in #523
  Add -malign-double to IA32 compiler flags by @nicholasbishop in #516
  pe: Fix image section entry-point validation by @iokomin in #518
  make-archive: Build reproducible tarball by @julian-klode in #527
  mok: remove MokListTrusted from PCR 7 by @baloo in #519
  - Drop upstreamed patch:
  - shim-bsc1177789-fix-null-pointer-deref-AuthenticodeVerify.patch
  - Cryptlib/CryptAuthenticode: fix NULL pointer dereference in  AuthenticodeVerify()
  - 53509eaf22	15.7
  - shim-jscPED-127-upgrade-shim-in-SLE15-SP5.patch
  - For backporting the following patches between 15.6 with aa1b289a1a (jsc#PED-127)
  - The following patches are merged to 15.7
  aa1b289a1a mok: remove MokListTrusted from PCR 7
  0cf43ac6d7 Add -malign-double to IA32 compiler flags
  ea4911c2f3 load_cert_file: Use EFI RT memory function
  2d4ebb5a79 load_cert_file: Fix stack issue
  5c537b3d0c shim: Flush the memory region from i-cache before execution
  14d6339829 Discard load-options that start with a NUL
  092c2b2bbe Reference MokListRT instead of MokList
  0eb07e11b2 Make SBAT variable payload introspectable</changelog>
  <changelog author="jlee@suse.com" date="1668772800">- Drop upstreamed patch:
  - shim-Enable-TDX-measurement-to-RTMR-register.patch
  - Enable TDX measurement to RTMR register (jsc#PED-1273)
  - 4fd484e4c2	15.7</changelog>
  <changelog author="jlee@suse.com" date="1668772801">- Add shim-Enable-the-NX-compatibility-flag-by-default.patch to
  enable the NX compatibility flag by default. (jsc#PED-127)</changelog>
  <changelog author="jlee@suse.com" date="1669204800">- Add POST_PROCESS_PE_FLAGS=-N to the build command in shim.spec to
  disable the NX compatibility flag when using post-process-pe because
  grub2 is not ready. (bsc#1205588)
  - Kernel can boot with the NX compatibility flag since 82e0d6d76a2a7
    be merged to v5.19. On the other hand, upstream is working on
    improve compressed kernel stage for NX:
    [PATCH v3 00/24] x86_64: Improvements at compressed kernel stage
    https://www.spinics.net/lists/kernel/msg4599636.html</changelog>
  <changelog author="jlee@suse.com" date="1679400000">- Updated shim signature after shim 15.7 be signed back:
  signature-sles.x86_64.asc, signature-sles.aarch64.asc (bsc#1198458, CVE-2022-28737)</changelog>
  <changelog author="jlee@suse.com" date="1681387200">- Upgrade shim-install for bsc#1210382
  After closing Leap-gap project since Leap 15.3, openSUSE Leap direct
  uses shim from SLE. So the ca_string is 'SUSE Linux Enterprise Secure Boot
  CA1', not 'openSUSE Secure Boot CA1'. It causes that the update_boot=no,
  so all files in /boot/efi/EFI/boot are not updated.
  The 86b73d1 patch added the logic that using ID field in os-release for
  checking Leap distro and set ca_string to 'SUSE Linux Enterprise Secure
  Boot CA1'. Then /boot/efi/EFI/boot/* can also be updated.
- https://github.com/SUSE/shim-resources (git log --oneline)
  86b73d1 Fix that bootx64.efi is not updated on Leap
  f2e8143 Use the long name to specify the grub2 key protector
  7283012 cryptodisk: support TPM authorized policies
  49e7a0d Do not use tpm_record_pcrs unless the command is in command.lst
  26c6bd5 Have grub take a snapshot of "relevant" TPM PCRs
  5c2c3ad Handle different cases of controlling cryptomount volumes during first stage boot
  a5c5734 Introduce --no-grub-install option</changelog>
  <changelog author="jlee@suse.com" date="1681387201">- Sometimes SLE shim signature be Microsoft updated before openSUSE shim
  signature. When submit request on IBS for updating SLE shim, the submitreq
  project be generated, but it always be blocked by checking the signature
  of openSUSE shim.
  It doesn't make sense checking openSUSE shim signature when building
  SLE shim on SLE platform, and vice versa. So the following change adds the
  logic to compare suffix (sles, opensuse) with distro_id (sle, opensuse).
  When and only when hash mismatch and distro_id match with suffix, stop
  building.
    [#] compare suffix (sles, opensuse) with distro_id (sle, opensuse)
    [#] when hash mismatch and distro_id match with suffix, stop building</changelog>
  <changelog author="jlee@suse.com" date="1682078400">- Updated shim.changes to add CVE-2022-28737 number for bsc#1198458.
  The issue be fixed by upgrade to shim 15.7. (bsc#1198458, CVE-2022-28737)</changelog>
</package>
<package pkgid="a74df5ab27a78ac3d35d34654735b93f4860484226b7a2c105fdbd480b2dbdd1" name="slirp4netns" arch="aarch64">
  <version epoch="0" ver="1.2.0" rel="150300.8.5.2"/>
  <changelog author="vrothberg@suse.com" date="1539777600">- Introduce slirp4netns in version 0.1 to support rootless Podman:
  slirp4netns provides user-mode networking ("slirp") for unprivileged network
  namespaces. A common use-case of slirp4netns is to enable network access for
  rootless container engines such as Podman.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1552910400">- Update to 0.3.0-beta1
  * Support protecting 127.0.0.1 on the host (--disable-host-loopback)
  * Support specifying CIDR like 10.0.2.0/24 (--cidr)
  * Fix CVE-2019-6778
  * Synced with QEMU upstream</changelog>
  <changelog author="rbrown@suse.com" date="1553083200">- Change _service to use releases instead of git commit references</changelog>
  <changelog author="sgrunert@suse.com" date="1553860800">- Update to 0.3.0
  * QMP-like JSON API for exposing node ports (--api-socket)</changelog>
  <changelog author="sgrunert@suse.com" date="1564660800">- Update to 0.3.1
  * Fix use-after-free</changelog>
  <changelog author="sgrunert@suse.com" date="1565006400">- Update to 0.3.2
  * Fix heap overflow in `ip_reass` on big packet input</changelog>
  <changelog author="sgrunert@suse.com" date="1565179200">- Add missing licenses to spec file</changelog>
  <changelog author="sgrunert@suse.com" date="1567080000">- Update to 0.3.3
  * Fix use-after-free in libslirp</changelog>
  <changelog author="sgrunert@suse.com" date="1567166400">- Update to 0.4.1
  * Support specifying netns path (slirp4netns --netns-type=path PATH
    TAPNAME)
  * Support specifying --userns-path
  * Vendor https://gitlab.freedesktop.org/slirp/libslirp (QEMU v4.1+)
  * Bring up loopback device when --configure is specified
  * Support sandboxing by creating a mount namespace
    (--enable-sandbox)
  * Support seccomp (--enable-seccomp)
- Add new build dependencies libcap-devel and libseccomp-devel</changelog>
  <changelog author="sgrunert@suse.com" date="1571659200">- Update to 0.4.2
  * Do not propagate mounts to the parent ns in sandbox</changelog>
  <changelog author="sgrunert@suse.com" date="1576670400">- Update to 0.4.3
  * api: raise an error if the socket path is too long
  * libslirp: update to v4.1.0: Including the fix for libslirp
    sends RST to app in response to arriving FIN when containerized
    socket is shutdown() with SHUT_WR
  * Fix create_sandbox error</changelog>
  <changelog author="rhafer@suse.com" date="1585310400">- Update to 0.4.4 (bsc#1167850)
  * libslirp: Update to v4.2.0:
  * New API function slirp_add_unix: add a forward rule to a Unix
    socket.
  * New API function slirp_remove_guestfwd: remove a forward rule
    previously added by slirp_add_exec, slirp_add_unix or
    slirp_add_guestfwd
  * New SlirpConfig.outbound_addr{,6} fields to bind output
    socket to a specific address
  * socket: do not fallback on host loopback if get_dns_addr()
    failed or the address is in slirp network
  * ncsi: fix checksum OOB memory access
  * tcp_emu(): fix OOB accesses
  * tftp: restrict relative path access
  * state: fix loading of guestfwd state</changelog>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Update to 1.0.0
  * libslirp to v0.4.3:
  * libslirp is no longer included in slirp4netns and needs be
    installed separately
  * --enable-sandbox is now out of experimental
  * New build dependeny: libslirp-devel &gt;= 4.1
    =&gt; this fixes (by removing the dependency on libslirp):
  * CVE-2020-10756 / bsc#1172380
  * CVE-2020-1983 / bsc#1170940
  * CVE-2020-29130 / bsc#1179467
  - remove slirp4netns-CVE-2020-29130.patch</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.1.8:
  * v1.1.8
  * CI: bump libslirp to v4.4.0
  * tests: Avoid closing pipe grep in cidr test
  * v1.1.7+dev
  * v1.1.7
  * test-slirp4netns-cidr.sh: avoid EPIPE
  * CI: s/test-centos/test-centos7/ for clarity
  * CI: Test with libslirp 4.3.1 on CentOS 7
  * .gitignore: add .vagrant
  * Vagrantfile: change VirtualBox itself's slirp CIDR</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.11:
  * Add --macaddress option to specify the MAC address of the tap
    interface.
  * Updated the man page.</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- New upstream release 1.2.0:
  * Add slirp4netns --target-type=bess /path/to/bess.sock for supporting UML (#281)
  * Explicitly support DHCP (#270)
  * Update parson to v1.1.3 (#273) kgabis/parson@70dc239...2d7b3dd
  * Refactored tests (#271)
- modernize spec file</changelog>
</package>
<package pkgid="b5433e97f58dcc414a27c6594b5442e14d2e240ba9cc78e436946dd6f7847723" name="slirp4netns" arch="s390x">
  <version epoch="0" ver="1.2.0" rel="150300.8.5.2"/>
  <changelog author="vrothberg@suse.com" date="1539777600">- Introduce slirp4netns in version 0.1 to support rootless Podman:
  slirp4netns provides user-mode networking ("slirp") for unprivileged network
  namespaces. A common use-case of slirp4netns is to enable network access for
  rootless container engines such as Podman.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1552910400">- Update to 0.3.0-beta1
  * Support protecting 127.0.0.1 on the host (--disable-host-loopback)
  * Support specifying CIDR like 10.0.2.0/24 (--cidr)
  * Fix CVE-2019-6778
  * Synced with QEMU upstream</changelog>
  <changelog author="rbrown@suse.com" date="1553083200">- Change _service to use releases instead of git commit references</changelog>
  <changelog author="sgrunert@suse.com" date="1553860800">- Update to 0.3.0
  * QMP-like JSON API for exposing node ports (--api-socket)</changelog>
  <changelog author="sgrunert@suse.com" date="1564660800">- Update to 0.3.1
  * Fix use-after-free</changelog>
  <changelog author="sgrunert@suse.com" date="1565006400">- Update to 0.3.2
  * Fix heap overflow in `ip_reass` on big packet input</changelog>
  <changelog author="sgrunert@suse.com" date="1565179200">- Add missing licenses to spec file</changelog>
  <changelog author="sgrunert@suse.com" date="1567080000">- Update to 0.3.3
  * Fix use-after-free in libslirp</changelog>
  <changelog author="sgrunert@suse.com" date="1567166400">- Update to 0.4.1
  * Support specifying netns path (slirp4netns --netns-type=path PATH
    TAPNAME)
  * Support specifying --userns-path
  * Vendor https://gitlab.freedesktop.org/slirp/libslirp (QEMU v4.1+)
  * Bring up loopback device when --configure is specified
  * Support sandboxing by creating a mount namespace
    (--enable-sandbox)
  * Support seccomp (--enable-seccomp)
- Add new build dependencies libcap-devel and libseccomp-devel</changelog>
  <changelog author="sgrunert@suse.com" date="1571659200">- Update to 0.4.2
  * Do not propagate mounts to the parent ns in sandbox</changelog>
  <changelog author="sgrunert@suse.com" date="1576670400">- Update to 0.4.3
  * api: raise an error if the socket path is too long
  * libslirp: update to v4.1.0: Including the fix for libslirp
    sends RST to app in response to arriving FIN when containerized
    socket is shutdown() with SHUT_WR
  * Fix create_sandbox error</changelog>
  <changelog author="rhafer@suse.com" date="1585310400">- Update to 0.4.4 (bsc#1167850)
  * libslirp: Update to v4.2.0:
  * New API function slirp_add_unix: add a forward rule to a Unix
    socket.
  * New API function slirp_remove_guestfwd: remove a forward rule
    previously added by slirp_add_exec, slirp_add_unix or
    slirp_add_guestfwd
  * New SlirpConfig.outbound_addr{,6} fields to bind output
    socket to a specific address
  * socket: do not fallback on host loopback if get_dns_addr()
    failed or the address is in slirp network
  * ncsi: fix checksum OOB memory access
  * tcp_emu(): fix OOB accesses
  * tftp: restrict relative path access
  * state: fix loading of guestfwd state</changelog>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Update to 1.0.0
  * libslirp to v0.4.3:
  * libslirp is no longer included in slirp4netns and needs be
    installed separately
  * --enable-sandbox is now out of experimental
  * New build dependeny: libslirp-devel &gt;= 4.1
    =&gt; this fixes (by removing the dependency on libslirp):
  * CVE-2020-10756 / bsc#1172380
  * CVE-2020-1983 / bsc#1170940
  * CVE-2020-29130 / bsc#1179467
  - remove slirp4netns-CVE-2020-29130.patch</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.1.8:
  * v1.1.8
  * CI: bump libslirp to v4.4.0
  * tests: Avoid closing pipe grep in cidr test
  * v1.1.7+dev
  * v1.1.7
  * test-slirp4netns-cidr.sh: avoid EPIPE
  * CI: s/test-centos/test-centos7/ for clarity
  * CI: Test with libslirp 4.3.1 on CentOS 7
  * .gitignore: add .vagrant
  * Vagrantfile: change VirtualBox itself's slirp CIDR</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.11:
  * Add --macaddress option to specify the MAC address of the tap
    interface.
  * Updated the man page.</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- New upstream release 1.2.0:
  * Add slirp4netns --target-type=bess /path/to/bess.sock for supporting UML (#281)
  * Explicitly support DHCP (#270)
  * Update parson to v1.1.3 (#273) kgabis/parson@70dc239...2d7b3dd
  * Refactored tests (#271)
- modernize spec file</changelog>
</package>
<package pkgid="a1e6b7c570b3b2541cdbaf8a9e92788afa176a6c73bae564e43503af09d2e865" name="slirp4netns" arch="src">
  <version epoch="0" ver="1.2.0" rel="150300.8.5.2"/>
  <changelog author="vrothberg@suse.com" date="1539777600">- Introduce slirp4netns in version 0.1 to support rootless Podman:
  slirp4netns provides user-mode networking ("slirp") for unprivileged network
  namespaces. A common use-case of slirp4netns is to enable network access for
  rootless container engines such as Podman.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1552910400">- Update to 0.3.0-beta1
  * Support protecting 127.0.0.1 on the host (--disable-host-loopback)
  * Support specifying CIDR like 10.0.2.0/24 (--cidr)
  * Fix CVE-2019-6778
  * Synced with QEMU upstream</changelog>
  <changelog author="rbrown@suse.com" date="1553083200">- Change _service to use releases instead of git commit references</changelog>
  <changelog author="sgrunert@suse.com" date="1553860800">- Update to 0.3.0
  * QMP-like JSON API for exposing node ports (--api-socket)</changelog>
  <changelog author="sgrunert@suse.com" date="1564660800">- Update to 0.3.1
  * Fix use-after-free</changelog>
  <changelog author="sgrunert@suse.com" date="1565006400">- Update to 0.3.2
  * Fix heap overflow in `ip_reass` on big packet input</changelog>
  <changelog author="sgrunert@suse.com" date="1565179200">- Add missing licenses to spec file</changelog>
  <changelog author="sgrunert@suse.com" date="1567080000">- Update to 0.3.3
  * Fix use-after-free in libslirp</changelog>
  <changelog author="sgrunert@suse.com" date="1567166400">- Update to 0.4.1
  * Support specifying netns path (slirp4netns --netns-type=path PATH
    TAPNAME)
  * Support specifying --userns-path
  * Vendor https://gitlab.freedesktop.org/slirp/libslirp (QEMU v4.1+)
  * Bring up loopback device when --configure is specified
  * Support sandboxing by creating a mount namespace
    (--enable-sandbox)
  * Support seccomp (--enable-seccomp)
- Add new build dependencies libcap-devel and libseccomp-devel</changelog>
  <changelog author="sgrunert@suse.com" date="1571659200">- Update to 0.4.2
  * Do not propagate mounts to the parent ns in sandbox</changelog>
  <changelog author="sgrunert@suse.com" date="1576670400">- Update to 0.4.3
  * api: raise an error if the socket path is too long
  * libslirp: update to v4.1.0: Including the fix for libslirp
    sends RST to app in response to arriving FIN when containerized
    socket is shutdown() with SHUT_WR
  * Fix create_sandbox error</changelog>
  <changelog author="rhafer@suse.com" date="1585310400">- Update to 0.4.4 (bsc#1167850)
  * libslirp: Update to v4.2.0:
  * New API function slirp_add_unix: add a forward rule to a Unix
    socket.
  * New API function slirp_remove_guestfwd: remove a forward rule
    previously added by slirp_add_exec, slirp_add_unix or
    slirp_add_guestfwd
  * New SlirpConfig.outbound_addr{,6} fields to bind output
    socket to a specific address
  * socket: do not fallback on host loopback if get_dns_addr()
    failed or the address is in slirp network
  * ncsi: fix checksum OOB memory access
  * tcp_emu(): fix OOB accesses
  * tftp: restrict relative path access
  * state: fix loading of guestfwd state</changelog>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Update to 1.0.0
  * libslirp to v0.4.3:
  * libslirp is no longer included in slirp4netns and needs be
    installed separately
  * --enable-sandbox is now out of experimental
  * New build dependeny: libslirp-devel &gt;= 4.1
    =&gt; this fixes (by removing the dependency on libslirp):
  * CVE-2020-10756 / bsc#1172380
  * CVE-2020-1983 / bsc#1170940
  * CVE-2020-29130 / bsc#1179467
  - remove slirp4netns-CVE-2020-29130.patch</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.1.8:
  * v1.1.8
  * CI: bump libslirp to v4.4.0
  * tests: Avoid closing pipe grep in cidr test
  * v1.1.7+dev
  * v1.1.7
  * test-slirp4netns-cidr.sh: avoid EPIPE
  * CI: s/test-centos/test-centos7/ for clarity
  * CI: Test with libslirp 4.3.1 on CentOS 7
  * .gitignore: add .vagrant
  * Vagrantfile: change VirtualBox itself's slirp CIDR</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.11:
  * Add --macaddress option to specify the MAC address of the tap
    interface.
  * Updated the man page.</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- New upstream release 1.2.0:
  * Add slirp4netns --target-type=bess /path/to/bess.sock for supporting UML (#281)
  * Explicitly support DHCP (#270)
  * Update parson to v1.1.3 (#273) kgabis/parson@70dc239...2d7b3dd
  * Refactored tests (#271)
- modernize spec file</changelog>
</package>
<package pkgid="54382fa2d775426867d68913c1ccd532b30f1acac51219c064df22866c919136" name="slirp4netns" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="150300.8.5.2"/>
  <changelog author="vrothberg@suse.com" date="1539777600">- Introduce slirp4netns in version 0.1 to support rootless Podman:
  slirp4netns provides user-mode networking ("slirp") for unprivileged network
  namespaces. A common use-case of slirp4netns is to enable network access for
  rootless container engines such as Podman.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1552910400">- Update to 0.3.0-beta1
  * Support protecting 127.0.0.1 on the host (--disable-host-loopback)
  * Support specifying CIDR like 10.0.2.0/24 (--cidr)
  * Fix CVE-2019-6778
  * Synced with QEMU upstream</changelog>
  <changelog author="rbrown@suse.com" date="1553083200">- Change _service to use releases instead of git commit references</changelog>
  <changelog author="sgrunert@suse.com" date="1553860800">- Update to 0.3.0
  * QMP-like JSON API for exposing node ports (--api-socket)</changelog>
  <changelog author="sgrunert@suse.com" date="1564660800">- Update to 0.3.1
  * Fix use-after-free</changelog>
  <changelog author="sgrunert@suse.com" date="1565006400">- Update to 0.3.2
  * Fix heap overflow in `ip_reass` on big packet input</changelog>
  <changelog author="sgrunert@suse.com" date="1565179200">- Add missing licenses to spec file</changelog>
  <changelog author="sgrunert@suse.com" date="1567080000">- Update to 0.3.3
  * Fix use-after-free in libslirp</changelog>
  <changelog author="sgrunert@suse.com" date="1567166400">- Update to 0.4.1
  * Support specifying netns path (slirp4netns --netns-type=path PATH
    TAPNAME)
  * Support specifying --userns-path
  * Vendor https://gitlab.freedesktop.org/slirp/libslirp (QEMU v4.1+)
  * Bring up loopback device when --configure is specified
  * Support sandboxing by creating a mount namespace
    (--enable-sandbox)
  * Support seccomp (--enable-seccomp)
- Add new build dependencies libcap-devel and libseccomp-devel</changelog>
  <changelog author="sgrunert@suse.com" date="1571659200">- Update to 0.4.2
  * Do not propagate mounts to the parent ns in sandbox</changelog>
  <changelog author="sgrunert@suse.com" date="1576670400">- Update to 0.4.3
  * api: raise an error if the socket path is too long
  * libslirp: update to v4.1.0: Including the fix for libslirp
    sends RST to app in response to arriving FIN when containerized
    socket is shutdown() with SHUT_WR
  * Fix create_sandbox error</changelog>
  <changelog author="rhafer@suse.com" date="1585310400">- Update to 0.4.4 (bsc#1167850)
  * libslirp: Update to v4.2.0:
  * New API function slirp_add_unix: add a forward rule to a Unix
    socket.
  * New API function slirp_remove_guestfwd: remove a forward rule
    previously added by slirp_add_exec, slirp_add_unix or
    slirp_add_guestfwd
  * New SlirpConfig.outbound_addr{,6} fields to bind output
    socket to a specific address
  * socket: do not fallback on host loopback if get_dns_addr()
    failed or the address is in slirp network
  * ncsi: fix checksum OOB memory access
  * tcp_emu(): fix OOB accesses
  * tftp: restrict relative path access
  * state: fix loading of guestfwd state</changelog>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Update to 1.0.0
  * libslirp to v0.4.3:
  * libslirp is no longer included in slirp4netns and needs be
    installed separately
  * --enable-sandbox is now out of experimental
  * New build dependeny: libslirp-devel &gt;= 4.1
    =&gt; this fixes (by removing the dependency on libslirp):
  * CVE-2020-10756 / bsc#1172380
  * CVE-2020-1983 / bsc#1170940
  * CVE-2020-29130 / bsc#1179467
  - remove slirp4netns-CVE-2020-29130.patch</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.1.8:
  * v1.1.8
  * CI: bump libslirp to v4.4.0
  * tests: Avoid closing pipe grep in cidr test
  * v1.1.7+dev
  * v1.1.7
  * test-slirp4netns-cidr.sh: avoid EPIPE
  * CI: s/test-centos/test-centos7/ for clarity
  * CI: Test with libslirp 4.3.1 on CentOS 7
  * .gitignore: add .vagrant
  * Vagrantfile: change VirtualBox itself's slirp CIDR</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.11:
  * Add --macaddress option to specify the MAC address of the tap
    interface.
  * Updated the man page.</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- New upstream release 1.2.0:
  * Add slirp4netns --target-type=bess /path/to/bess.sock for supporting UML (#281)
  * Explicitly support DHCP (#270)
  * Update parson to v1.1.3 (#273) kgabis/parson@70dc239...2d7b3dd
  * Refactored tests (#271)
- modernize spec file</changelog>
</package>
<package pkgid="f43e2300ec21e93ff18644bd948c1dbb976ccd213116e2bf0521830080cc7811" name="snapper" arch="aarch64">
  <version epoch="0" ver="0.8.16" rel="150300.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1586174400">- updated translations (bsc#1149754)
- generate dsc file for Ubuntu 19.10</changelog>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
</package>
<package pkgid="a662b752b932a2f21e0a950f1665d282e961fafc13cc8fc749cf8fbc55be44c9" name="snapper" arch="s390x">
  <version epoch="0" ver="0.8.16" rel="150300.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1586174400">- updated translations (bsc#1149754)
- generate dsc file for Ubuntu 19.10</changelog>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
</package>
<package pkgid="a946cc1dd100c84add494d2ecbbfaa8da9d751f015181a17c6b11a2601d7cd86" name="snapper" arch="src">
  <version epoch="0" ver="0.8.16" rel="150300.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1586174400">- updated translations (bsc#1149754)
- generate dsc file for Ubuntu 19.10</changelog>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
</package>
<package pkgid="10a9fafb9fe5b959e4f9e3d5de28caa156d380465823eedbb4fc3e3d1e7753a5" name="snapper" arch="x86_64">
  <version epoch="0" ver="0.8.16" rel="150300.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1586174400">- updated translations (bsc#1149754)
- generate dsc file for Ubuntu 19.10</changelog>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
</package>
<package pkgid="b8dd378cd6abec3f8f8cc23a0eb7ae2ec3a024cdbd0a427b663d799585f424b2" name="snapper" arch="aarch64">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="a6842c3ed16ba52f3b1f5ff84364787c1ca90360b73ab86dddc7c7c624836dd0" name="snapper" arch="s390x">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="1285cdc9ce501e88d01ce024551dc522ddcbf38bef948caf5b0accc34f5be83c" name="snapper" arch="src">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="fb839b90563535925954b6bba9df1bee968411b896aec8a08e405c83b0962969" name="snapper" arch="x86_64">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="8c04d2eab94eb3007b8745e80b8d6f8eb40e13467da330843847c727355f6297" name="supportutils" arch="noarch">
  <version epoch="0" ver="3.1.21" rel="150300.7.35.18.1"/>
  <changelog author="jason.record@suse.com" date="1618488000">- Additions to version 3.1.15
  + Added drbd-overview to drbd.txt
  + Added list-timers to systemd.txt (bsc#1169348)
  + Including nfs4 in search (bsc#1184829)
- Minor: Fix a typo (executible -&gt; executable) #99
- Changed minor wording to loaded module</changelog>
  <changelog author="jason.record@suse.com" date="1618833600">- Additions to version 3.1.15
  + Checks package signatures in rpm.txt (bsc#1021918)
  + Optimize find (bsc#1184912)
- Using zypper --xmlout (bsc#1181351)
- Error fix for sysfs.txt (bsc#1089870)</changelog>
  <changelog author="jason.record@suse.com" date="1620820800">- getappcore checks for valid compression binary (bsc#1185991)
- getappcore does not trigger errors with help message (bsc#1185993)</changelog>
  <changelog author="jason.record@suse.com" date="1621857600">- analyzevmcore supports local directories (bsc#1186397)</changelog>
  <changelog author="jason.record@suse.com" date="1622116800">- Fixes to supportconfig
  + Exclude rhn.conf from etc.txt (bsc#1186347)</changelog>
  <changelog author="jason.record@suse.com" date="1623067200">- Changes to version 3.1.16
  + lsof options to improve performance (bsc#1186687)</changelog>
  <changelog author="jason.record@suse.com" date="1625572800">- Changes to version 3.1.17
  + Adding ethtool options g l m to network.txt (jsc#SLE-18240)</changelog>
  <changelog author="jason.record@suse.com" date="1629115200">- Changes to version 3.1.18
  + Added email.txt based on OPTION_EMAIL #108 (bsc#1189028)
  + Include 'multipath -t' output in mpio.txt #105
  + Improved lsblk readability with --ascsi #106
  + Removed duplicate commands in network.txt
  + Remove duplicate firewalld status output #109</changelog>
  <changelog author="jason.record@suse.com" date="1631102400">- Fixed cron package for RPM validation (bsc#1190315)
- Updated spec file with correct URL</changelog>
  <changelog author="jason.record@suse.com" date="1633348800">- Installing to /usr/sbin instead of /sbin (bsc#1191096)
- Added shared memory as a log directory for emergency use (bsc#1190943)</changelog>
  <changelog author="jason.record@suse.com" date="1634558400">- getappcore identifies compressed core files (bsc#1191794)</changelog>
  <changelog author="jason.record@suse.com" date="1637150400">- Merged Include udev rules in /lib/udev/rules.d/ #113
- Merged Move localmessage/warm logs out of messages.txt to new localwarn.txt #87</changelog>
  <changelog author="jason.record@suse.com" date="1639569600">- Changes to version 3.1.19
  + Removed chronyc DNS lookups with -n switch (bsc#1193732)</changelog>
  <changelog author="jason.record@suse.com" date="1641816000">- Changes to version 3.1.19
  + Made /proc directory and network names spaces configurable (bsc#1193868)</changelog>
  <changelog author="jason.record@suse.com" date="1646395200">- Changes to version 3.1.20
  + Added command blkid #114
  + Added s390x specific files and output #115
  + Fix for invalid argument during updates (bsc#1193204)
  + Optimized conf_files, conf_files_text and log_cmd functions #118
  + Fixed iscsi initiator name (bsc#1195797)
  + Added rpcinfo -p output #116
  + Included /etc/sssd/conf.d configuration files #100</changelog>
  <changelog author="jason.record@suse.com" date="1647345600">- Spec file adjusted for usr-merge</changelog>
  <changelog author="jason.record@suse.com" date="1654171200">- Added a listing to /dev/mapper/. #129</changelog>
  <changelog author="jason.record@suse.com" date="1666094400">- Changes to version 3.1.21
  + Added type output with df command in fs-diskio.txt (issue#141)
  + Gather all files in /etc/security/limits.d/ (issue#142)
  + Fixed KVM virtualization detection on bare metal (bsc#1184689)
  + Added logging using journalctl (bsc#1200330)
  + Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818)
  + Added system logging configuration and checking in messages_config.txt (issue#103)
  + If rsyslog not installed collect more from journalctl (issue#120)
  + Added systemd-status.txt for the status of all service units (issue#125)
  + autofs includes files in (+dir:&lt;path&gt;) (issue#111)
  + Get current sar data before collecting files (bsc#1192648)
  + Collects everything in /etc/multipath/ (bsc#1192252)
  + Collects power management information in hardware.txt (bsc#1197428)
  + Checks for suseconnect-ng or SUSEConnect packages (bsc#1202337)
  + Fixed conf_files and conf_text_files so y2log is gathered (issue#134, bsc#1202269)
  + Update to nvme_info and block_info #133 (bsc#1202417)
  + Added IO scheduler (issue#136)
  + Added includedir directories from /etc/sudoers (bsc#1188086)</changelog>
  <changelog author="jason.record@suse.com" date="1666094401">- Added lifecycle information (issue#140)</changelog>
  <changelog author="jason.record@suse.com" date="1668168000">- Changes to supportconfig version 3.1.11-46.3
  + Added missed sanitation check on crash.txt (bsc#1203818)
- Changes to supportconfig.rc version 3.1.11-30
  + Added check to _sanitize_file
  + Using variable for replement text in _sanitize_file</changelog>
</package>
<package pkgid="0855546c2aa0bdbbbc9f78afd23ab2a0d82c439f9d912b65acf18698f7afa8a1" name="supportutils" arch="src">
  <version epoch="0" ver="3.1.21" rel="150300.7.35.18.1"/>
  <changelog author="jason.record@suse.com" date="1618488000">- Additions to version 3.1.15
  + Added drbd-overview to drbd.txt
  + Added list-timers to systemd.txt (bsc#1169348)
  + Including nfs4 in search (bsc#1184829)
- Minor: Fix a typo (executible -&gt; executable) #99
- Changed minor wording to loaded module</changelog>
  <changelog author="jason.record@suse.com" date="1618833600">- Additions to version 3.1.15
  + Checks package signatures in rpm.txt (bsc#1021918)
  + Optimize find (bsc#1184912)
- Using zypper --xmlout (bsc#1181351)
- Error fix for sysfs.txt (bsc#1089870)</changelog>
  <changelog author="jason.record@suse.com" date="1620820800">- getappcore checks for valid compression binary (bsc#1185991)
- getappcore does not trigger errors with help message (bsc#1185993)</changelog>
  <changelog author="jason.record@suse.com" date="1621857600">- analyzevmcore supports local directories (bsc#1186397)</changelog>
  <changelog author="jason.record@suse.com" date="1622116800">- Fixes to supportconfig
  + Exclude rhn.conf from etc.txt (bsc#1186347)</changelog>
  <changelog author="jason.record@suse.com" date="1623067200">- Changes to version 3.1.16
  + lsof options to improve performance (bsc#1186687)</changelog>
  <changelog author="jason.record@suse.com" date="1625572800">- Changes to version 3.1.17
  + Adding ethtool options g l m to network.txt (jsc#SLE-18240)</changelog>
  <changelog author="jason.record@suse.com" date="1629115200">- Changes to version 3.1.18
  + Added email.txt based on OPTION_EMAIL #108 (bsc#1189028)
  + Include 'multipath -t' output in mpio.txt #105
  + Improved lsblk readability with --ascsi #106
  + Removed duplicate commands in network.txt
  + Remove duplicate firewalld status output #109</changelog>
  <changelog author="jason.record@suse.com" date="1631102400">- Fixed cron package for RPM validation (bsc#1190315)
- Updated spec file with correct URL</changelog>
  <changelog author="jason.record@suse.com" date="1633348800">- Installing to /usr/sbin instead of /sbin (bsc#1191096)
- Added shared memory as a log directory for emergency use (bsc#1190943)</changelog>
  <changelog author="jason.record@suse.com" date="1634558400">- getappcore identifies compressed core files (bsc#1191794)</changelog>
  <changelog author="jason.record@suse.com" date="1637150400">- Merged Include udev rules in /lib/udev/rules.d/ #113
- Merged Move localmessage/warm logs out of messages.txt to new localwarn.txt #87</changelog>
  <changelog author="jason.record@suse.com" date="1639569600">- Changes to version 3.1.19
  + Removed chronyc DNS lookups with -n switch (bsc#1193732)</changelog>
  <changelog author="jason.record@suse.com" date="1641816000">- Changes to version 3.1.19
  + Made /proc directory and network names spaces configurable (bsc#1193868)</changelog>
  <changelog author="jason.record@suse.com" date="1646395200">- Changes to version 3.1.20
  + Added command blkid #114
  + Added s390x specific files and output #115
  + Fix for invalid argument during updates (bsc#1193204)
  + Optimized conf_files, conf_files_text and log_cmd functions #118
  + Fixed iscsi initiator name (bsc#1195797)
  + Added rpcinfo -p output #116
  + Included /etc/sssd/conf.d configuration files #100</changelog>
  <changelog author="jason.record@suse.com" date="1647345600">- Spec file adjusted for usr-merge</changelog>
  <changelog author="jason.record@suse.com" date="1654171200">- Added a listing to /dev/mapper/. #129</changelog>
  <changelog author="jason.record@suse.com" date="1666094400">- Changes to version 3.1.21
  + Added type output with df command in fs-diskio.txt (issue#141)
  + Gather all files in /etc/security/limits.d/ (issue#142)
  + Fixed KVM virtualization detection on bare metal (bsc#1184689)
  + Added logging using journalctl (bsc#1200330)
  + Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818)
  + Added system logging configuration and checking in messages_config.txt (issue#103)
  + If rsyslog not installed collect more from journalctl (issue#120)
  + Added systemd-status.txt for the status of all service units (issue#125)
  + autofs includes files in (+dir:&lt;path&gt;) (issue#111)
  + Get current sar data before collecting files (bsc#1192648)
  + Collects everything in /etc/multipath/ (bsc#1192252)
  + Collects power management information in hardware.txt (bsc#1197428)
  + Checks for suseconnect-ng or SUSEConnect packages (bsc#1202337)
  + Fixed conf_files and conf_text_files so y2log is gathered (issue#134, bsc#1202269)
  + Update to nvme_info and block_info #133 (bsc#1202417)
  + Added IO scheduler (issue#136)
  + Added includedir directories from /etc/sudoers (bsc#1188086)</changelog>
  <changelog author="jason.record@suse.com" date="1666094401">- Added lifecycle information (issue#140)</changelog>
  <changelog author="jason.record@suse.com" date="1668168000">- Changes to supportconfig version 3.1.11-46.3
  + Added missed sanitation check on crash.txt (bsc#1203818)
- Changes to supportconfig.rc version 3.1.11-30
  + Added check to _sanitize_file
  + Using variable for replement text in _sanitize_file</changelog>
</package>
<package pkgid="4b2eed06f29ad50f9b8c236675d5b6e9ee8ba37bd63afe88b2fc67545a156638" name="suse-build-key" arch="noarch">
  <version epoch="0" ver="12.0" rel="150000.8.31.1"/>
  <changelog author="ro@suse.de" date="1480420800">- use dumpsigs script from openSUSE to merge code</changelog>
  <changelog author="meissner@suse.com" date="1481112000">- extend the build@suse.de product key. (bsc#1014151)
  pub  2048R/39DB7C82 2013-01-31 [expires: 2020-12-06]
  uid                            SuSE Package Signing Key &lt;build@suse.de&gt;</changelog>
  <changelog author="meissner@suse.com" date="1522238400">- created a new security@suse.de communication key. (bsc#1082022)
- extended the PTF key and the SLE10 build@suse.de key. (bsc#1085512)</changelog>
  <changelog author="meissner@suse.com" date="1542110400">- include ptf key in the key directory to avoid it being
  stripped via %doc stripping. (bsc#1044232)</changelog>
  <changelog author="meissner@suse.com" date="1583928000">- created a new security@suse.de communication key (bsc#1166334)</changelog>
  <changelog author="meissner@suse.com" date="1587643200">- add a /usr/share/container-keys/ directory for GPG based Container
  verification.
- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1597320000">- actually the container key is different from the build signing
  key. (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1600689600">- suse build key extended (bsc#1176759)
  gpg-pubkey-39db7c82-5847eb1f.asc -&gt; gpg-pubkey-39db7c82-5f68629b.asc</changelog>
  <changelog author="meissner@suse.com" date="1645099200">- extended expiry of SUSE PTF key, move it to suse_ptf_key_old.asc
- added new SUSE PTF key with RSA2048 bit as suse_ptf_key.asc (bsc#1196494)
- extended expiry of SUSE SLES11 key (bsc#1194845)
- added SUSE Contaner signing key in PEM format for use e.g. by cosign.
- SUSE security key replaced with 2022 edition (E-Mail usage only). (bsc#1196495)</changelog>
  <changelog author="meissner@suse.com" date="1648123200">- No longer install 1024bit keys by default. (bsc#1197293)
  - SLE11 key moved to documentation
  - old PTF (pre March 2022) moved to documentation only</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- still ship the old ptf key (was not added to documentation by mistake).
  (bsc#1198504)</changelog>
  <changelog author="meissner@suse.com" date="1666699200">- added /usr/share/pki/containers directory for container pem keys
  (cosign/sigstore style), put our PEM key there too (bsc#1204706)</changelog>
  <changelog author="meissner@suse.com" date="1675771200">- Establish multiple new 4096 RSA keys that we will switch
  to mid of 2023. (jsc#PED-2777)
  - gpg-pubkey-3fa1d6ce-63c9481c.asc: new 4096 RSA signing key for SLE (RPM+repos).
  - gpg-pubkey-d588dc46-63c939db.asc: new 4096 RSA reserver key for SLE (RPM+repos).
  - suse_ptf_key_4096.asc: new 4096 RSA signing key for PTF RPMs.
  - build-container-8fd6c337-63c94b45.asc/build-container-8fd6c337-63c94b45.pem:
    new RSA 4096 key for the SUSE registry registry.suse.com, installed as
    suse-container-key-2023.pem and suse-container-key-2023.asc
  - suse_ptf_containerkey_2023.asc suse_ptf_containerkey_2023.pem:
    New PTF container signing key for registry.suse.com/ptf/ space.</changelog>
</package>
<package pkgid="f3571753f1d9bd006508b6f50f5f2fb81ba95bbd93df9e6615e4bd8f1337a605" name="suse-build-key" arch="src">
  <version epoch="0" ver="12.0" rel="150000.8.31.1"/>
  <changelog author="ro@suse.de" date="1358164800">- added reserve key for SLES (fate#312896)
  50A3DD1C SuSE Package Signing Key (reserve key) &lt;build@suse.de&gt;
  valid until (2017-01-13)</changelog>
  <changelog author="ro@suse.de" date="1359633600">- added future signing key for SLES (fate#314767) (bnc#801055)
  using 2048 bit rsa key</changelog>
  <changelog author="meissner@suse.com" date="1389268800">- Merged over logic from openSUSE-build-key.
- Got rid of default importing into roots keyring.
- Removed some old keys.
- Clarify that security@suse.de is a email only key
- PTF key is supplied also as %doc, to not be default
  imported.
- Keys currently inside:
  - pub  2048R/39DB7C82 SuSE Package Signing Key &lt;build@suse.de&gt;
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) &lt;build@suse.de&gt;
  - pub  1024D/B37B98A9 SUSE PTF Signing Key &lt;support@suse.com&gt;
  - pub  2048R/3D25D3D9 SuSE Security Team &lt;security@suse.de&gt;</changelog>
  <changelog author="meissner@suse.com" date="1389614400">- reverted to contain the fullkeyring build SLE12 Alpha.
- also list the old sle11 build@suse.de key temporary</changelog>
  <changelog author="meissner@suse.com" date="1392033600">- create suse-build-key.gpg during build.
- Remove old keys from keyring. (fate#314767)
  Keys currently inside the RPM trusted keyring:
  - pub  2048R/39DB7C82 SuSE Package Signing Key &lt;build@suse.de&gt;
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) &lt;build@suse.de&gt;
- Various keys are moved to the documentation area
  (/usr/share/doc/packages/suse-build-key)
  - build-at-suse-sle11.asc: the old SUSE Linux Enterprise 11 key.
    if SUSE Linux Enterprise 11 packages need to be verified on
    a SUSE Linux Enterprise 12 system.
  - suse_ptf_key.asc: The suse ptf key. For verification of provided PTFs.
  - security_at_suse_de.asc: Use only for email encryption and
    verification purposes when contacting our security contact address
    security@suse.de</changelog>
  <changelog author="meissner@suse.com" date="1409313600">- Went to new method again.
  - suse-build-key.gpg blob dropped
  - ship seperate files</changelog>
  <changelog author="meissner@suse.com" date="1412251200">- renamed security_at_suse_de.asc to security_at_suse_de_old.asc
- security_at_suse_de.asc: new 4096 bit RSA key.
  pub  4096R/317CD502 2014-10-02 SUSE Security Team &lt;security@suse.de&gt;
  bnc#899509</changelog>
  <changelog author="ro@suse.de" date="1480420800">- use dumpsigs script from openSUSE to merge code</changelog>
  <changelog author="meissner@suse.com" date="1481112000">- extend the build@suse.de product key. (bsc#1014151)
  pub  2048R/39DB7C82 2013-01-31 [expires: 2020-12-06]
  uid                            SuSE Package Signing Key &lt;build@suse.de&gt;</changelog>
  <changelog author="meissner@suse.com" date="1522238400">- created a new security@suse.de communication key. (bsc#1082022)
- extended the PTF key and the SLE10 build@suse.de key. (bsc#1085512)</changelog>
  <changelog author="meissner@suse.com" date="1542110400">- include ptf key in the key directory to avoid it being
  stripped via %doc stripping. (bsc#1044232)</changelog>
  <changelog author="meissner@suse.com" date="1583928000">- created a new security@suse.de communication key (bsc#1166334)</changelog>
  <changelog author="meissner@suse.com" date="1587643200">- add a /usr/share/container-keys/ directory for GPG based Container
  verification.
- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1597320000">- actually the container key is different from the build signing
  key. (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1600689600">- suse build key extended (bsc#1176759)
  gpg-pubkey-39db7c82-5847eb1f.asc -&gt; gpg-pubkey-39db7c82-5f68629b.asc</changelog>
  <changelog author="meissner@suse.com" date="1645099200">- extended expiry of SUSE PTF key, move it to suse_ptf_key_old.asc
- added new SUSE PTF key with RSA2048 bit as suse_ptf_key.asc (bsc#1196494)
- extended expiry of SUSE SLES11 key (bsc#1194845)
- added SUSE Contaner signing key in PEM format for use e.g. by cosign.
- SUSE security key replaced with 2022 edition (E-Mail usage only). (bsc#1196495)</changelog>
  <changelog author="meissner@suse.com" date="1648123200">- No longer install 1024bit keys by default. (bsc#1197293)
  - SLE11 key moved to documentation
  - old PTF (pre March 2022) moved to documentation only</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- still ship the old ptf key (was not added to documentation by mistake).
  (bsc#1198504)</changelog>
  <changelog author="meissner@suse.com" date="1666699200">- added /usr/share/pki/containers directory for container pem keys
  (cosign/sigstore style), put our PEM key there too (bsc#1204706)</changelog>
  <changelog author="meissner@suse.com" date="1675771200">- Establish multiple new 4096 RSA keys that we will switch
  to mid of 2023. (jsc#PED-2777)
  - gpg-pubkey-3fa1d6ce-63c9481c.asc: new 4096 RSA signing key for SLE (RPM+repos).
  - gpg-pubkey-d588dc46-63c939db.asc: new 4096 RSA reserver key for SLE (RPM+repos).
  - suse_ptf_key_4096.asc: new 4096 RSA signing key for PTF RPMs.
  - build-container-8fd6c337-63c94b45.asc/build-container-8fd6c337-63c94b45.pem:
    new RSA 4096 key for the SUSE registry registry.suse.com, installed as
    suse-container-key-2023.pem and suse-container-key-2023.asc
  - suse_ptf_containerkey_2023.asc suse_ptf_containerkey_2023.pem:
    New PTF container signing key for registry.suse.com/ptf/ space.</changelog>
</package>
<package pkgid="1a38f599c73b7a2329afa63954b349a78860751f62174349850061ebdf2fd5f8" name="suse-module-tools" arch="aarch64">
  <version epoch="0" ver="15.4.16" rel="150400.3.8.1"/>
  <changelog author="mwilck@suse.com" date="1604318400">- Update to version 15.3.5:
  * Skip coldplug for memory devices on ppc64le, using generator</changelog>
  <changelog author="mwilck@suse.com" date="1605873600">- Add bugref for bsc#1174287 and bsc#1172745
  * The workaround for these was in 15.3.5 already.</changelog>
  <changelog author="mwilck@suse.com" date="1619092800">- Update to version 15.3.6:
  * dm-crypt requires essiv in SLE15 SP3 (boo#1183063 bsc#1184134 ltc#192244).</changelog>
  <changelog author="mwilck@suse.com" date="1623931200">- Update to version 15.3.7:
  * Fix treatment of compressed modules (bsc#1187093)</changelog>
  <changelog author="mwilck@suse.com" date="1625572800">- Update to version 15.3.8:
  * modprobe.d: Remove dma=none setting for parport_pc
    (bsc#1177695)</changelog>
  <changelog author="mwilck@suse.com" date="1628856000">- Update to version 15.4.2
- Move config files to /lib/modprobe.d and /lib/depmod.d
  (jsc#SLE-20639)
  * "modprobe $FS" for a blacklisted file system now offers to
    unblacklist the module permanently
  * disabled automatic un-blacklisting of filesystem modules loaded
    at installation time
- Replace mkinitrd with dracut everywhere (jsc#SLE-20348)
- Add faster substitute for lsinitrd to speed up weak-modules2
  (jsc#SLE-9078)
- Enable f2fs
- Add a "Supplements" dependency on dkms to the "legacy" submodule
  (dkms needs "weak-modules")
- modprobe.d cleanups and fixes:
  * Unify ppc64 and ppc64le
  * Delete files for obsolete architectures
  * Remove obsolete SUSE_INITRD statements (bsc#1161343)
  * Remove dma=none setting for parport_pc (bsc#1177695)
- Add README.md</changelog>
  <changelog author="mwilck@suse.com" date="1629374400">- Update to version 15.4.3:
  * fix problem that initrd may not be rebuilt after installing
    kernel-$flavor-extra (bsc#1189441)</changelog>
  <changelog author="mwilck@suse.com" date="1633089600">- Update to version 15.4.4:
  * Import kernel scriptlets from kernel-source
    (bsc#1189841, bsc#1190598)
  * Provide "suse-kernel-rpm-scriptlets"</changelog>
  <changelog author="mwilck@suse.com" date="1633348800">- Update to version 15.4.5:
  * inkmp-script(postun): don't pass  existing files to weak-modules2
    (boo#1191200)
  * kernel-scriptlets: skip cert scriptlet on non-UEFI systems
    (boo#1191260)</changelog>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.6:
  * rpm-script: fix bad exit status in OpenQA (bsc#1191922)
  * cert-script: Deal with existing $cert.delete file (bsc#1191804).
  * cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
  * cert-script: Only print mokutil output in verbose mode.</changelog>
  <changelog author="mwilck@suse.com" date="1634904001">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.4.16:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
</package>
<package pkgid="dea8260ebb1f4405265bee9631690185b9c30389e4bb56609938acc066bef932" name="suse-module-tools" arch="s390x">
  <version epoch="0" ver="15.4.16" rel="150400.3.8.1"/>
  <changelog author="mwilck@suse.com" date="1604318400">- Update to version 15.3.5:
  * Skip coldplug for memory devices on ppc64le, using generator</changelog>
  <changelog author="mwilck@suse.com" date="1605873600">- Add bugref for bsc#1174287 and bsc#1172745
  * The workaround for these was in 15.3.5 already.</changelog>
  <changelog author="mwilck@suse.com" date="1619092800">- Update to version 15.3.6:
  * dm-crypt requires essiv in SLE15 SP3 (boo#1183063 bsc#1184134 ltc#192244).</changelog>
  <changelog author="mwilck@suse.com" date="1623931200">- Update to version 15.3.7:
  * Fix treatment of compressed modules (bsc#1187093)</changelog>
  <changelog author="mwilck@suse.com" date="1625572800">- Update to version 15.3.8:
  * modprobe.d: Remove dma=none setting for parport_pc
    (bsc#1177695)</changelog>
  <changelog author="mwilck@suse.com" date="1628856000">- Update to version 15.4.2
- Move config files to /lib/modprobe.d and /lib/depmod.d
  (jsc#SLE-20639)
  * "modprobe $FS" for a blacklisted file system now offers to
    unblacklist the module permanently
  * disabled automatic un-blacklisting of filesystem modules loaded
    at installation time
- Replace mkinitrd with dracut everywhere (jsc#SLE-20348)
- Add faster substitute for lsinitrd to speed up weak-modules2
  (jsc#SLE-9078)
- Enable f2fs
- Add a "Supplements" dependency on dkms to the "legacy" submodule
  (dkms needs "weak-modules")
- modprobe.d cleanups and fixes:
  * Unify ppc64 and ppc64le
  * Delete files for obsolete architectures
  * Remove obsolete SUSE_INITRD statements (bsc#1161343)
  * Remove dma=none setting for parport_pc (bsc#1177695)
- Add README.md</changelog>
  <changelog author="mwilck@suse.com" date="1629374400">- Update to version 15.4.3:
  * fix problem that initrd may not be rebuilt after installing
    kernel-$flavor-extra (bsc#1189441)</changelog>
  <changelog author="mwilck@suse.com" date="1633089600">- Update to version 15.4.4:
  * Import kernel scriptlets from kernel-source
    (bsc#1189841, bsc#1190598)
  * Provide "suse-kernel-rpm-scriptlets"</changelog>
  <changelog author="mwilck@suse.com" date="1633348800">- Update to version 15.4.5:
  * inkmp-script(postun): don't pass  existing files to weak-modules2
    (boo#1191200)
  * kernel-scriptlets: skip cert scriptlet on non-UEFI systems
    (boo#1191260)</changelog>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.6:
  * rpm-script: fix bad exit status in OpenQA (bsc#1191922)
  * cert-script: Deal with existing $cert.delete file (bsc#1191804).
  * cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
  * cert-script: Only print mokutil output in verbose mode.</changelog>
  <changelog author="mwilck@suse.com" date="1634904001">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.4.16:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
</package>
<package pkgid="cdc634971d987f058fa496b42b8aad082d183220d800fbc174fbbac0fa810088" name="suse-module-tools" arch="src">
  <version epoch="0" ver="15.4.16" rel="150400.3.8.1"/>
  <changelog author="mwilck@suse.com" date="1604318400">- Update to version 15.3.5:
  * Skip coldplug for memory devices on ppc64le, using generator</changelog>
  <changelog author="mwilck@suse.com" date="1605873600">- Add bugref for bsc#1174287 and bsc#1172745
  * The workaround for these was in 15.3.5 already.</changelog>
  <changelog author="mwilck@suse.com" date="1619092800">- Update to version 15.3.6:
  * dm-crypt requires essiv in SLE15 SP3 (boo#1183063 bsc#1184134 ltc#192244).</changelog>
  <changelog author="mwilck@suse.com" date="1623931200">- Update to version 15.3.7:
  * Fix treatment of compressed modules (bsc#1187093)</changelog>
  <changelog author="mwilck@suse.com" date="1625572800">- Update to version 15.3.8:
  * modprobe.d: Remove dma=none setting for parport_pc
    (bsc#1177695)</changelog>
  <changelog author="mwilck@suse.com" date="1628856000">- Update to version 15.4.2
- Move config files to /lib/modprobe.d and /lib/depmod.d
  (jsc#SLE-20639)
  * "modprobe $FS" for a blacklisted file system now offers to
    unblacklist the module permanently
  * disabled automatic un-blacklisting of filesystem modules loaded
    at installation time
- Replace mkinitrd with dracut everywhere (jsc#SLE-20348)
- Add faster substitute for lsinitrd to speed up weak-modules2
  (jsc#SLE-9078)
- Enable f2fs
- Add a "Supplements" dependency on dkms to the "legacy" submodule
  (dkms needs "weak-modules")
- modprobe.d cleanups and fixes:
  * Unify ppc64 and ppc64le
  * Delete files for obsolete architectures
  * Remove obsolete SUSE_INITRD statements (bsc#1161343)
  * Remove dma=none setting for parport_pc (bsc#1177695)
- Add README.md</changelog>
  <changelog author="mwilck@suse.com" date="1629374400">- Update to version 15.4.3:
  * fix problem that initrd may not be rebuilt after installing
    kernel-$flavor-extra (bsc#1189441)</changelog>
  <changelog author="mwilck@suse.com" date="1633089600">- Update to version 15.4.4:
  * Import kernel scriptlets from kernel-source
    (bsc#1189841, bsc#1190598)
  * Provide "suse-kernel-rpm-scriptlets"</changelog>
  <changelog author="mwilck@suse.com" date="1633348800">- Update to version 15.4.5:
  * inkmp-script(postun): don't pass  existing files to weak-modules2
    (boo#1191200)
  * kernel-scriptlets: skip cert scriptlet on non-UEFI systems
    (boo#1191260)</changelog>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.6:
  * rpm-script: fix bad exit status in OpenQA (bsc#1191922)
  * cert-script: Deal with existing $cert.delete file (bsc#1191804).
  * cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
  * cert-script: Only print mokutil output in verbose mode.</changelog>
  <changelog author="mwilck@suse.com" date="1634904001">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.4.16:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
</package>
<package pkgid="c622135eec3d3cc4f425f5a3cf8a19da003a4235a6a0cf497d509c9edf8494a2" name="suse-module-tools" arch="x86_64">
  <version epoch="0" ver="15.4.16" rel="150400.3.8.1"/>
  <changelog author="mwilck@suse.com" date="1604318400">- Update to version 15.3.5:
  * Skip coldplug for memory devices on ppc64le, using generator</changelog>
  <changelog author="mwilck@suse.com" date="1605873600">- Add bugref for bsc#1174287 and bsc#1172745
  * The workaround for these was in 15.3.5 already.</changelog>
  <changelog author="mwilck@suse.com" date="1619092800">- Update to version 15.3.6:
  * dm-crypt requires essiv in SLE15 SP3 (boo#1183063 bsc#1184134 ltc#192244).</changelog>
  <changelog author="mwilck@suse.com" date="1623931200">- Update to version 15.3.7:
  * Fix treatment of compressed modules (bsc#1187093)</changelog>
  <changelog author="mwilck@suse.com" date="1625572800">- Update to version 15.3.8:
  * modprobe.d: Remove dma=none setting for parport_pc
    (bsc#1177695)</changelog>
  <changelog author="mwilck@suse.com" date="1628856000">- Update to version 15.4.2
- Move config files to /lib/modprobe.d and /lib/depmod.d
  (jsc#SLE-20639)
  * "modprobe $FS" for a blacklisted file system now offers to
    unblacklist the module permanently
  * disabled automatic un-blacklisting of filesystem modules loaded
    at installation time
- Replace mkinitrd with dracut everywhere (jsc#SLE-20348)
- Add faster substitute for lsinitrd to speed up weak-modules2
  (jsc#SLE-9078)
- Enable f2fs
- Add a "Supplements" dependency on dkms to the "legacy" submodule
  (dkms needs "weak-modules")
- modprobe.d cleanups and fixes:
  * Unify ppc64 and ppc64le
  * Delete files for obsolete architectures
  * Remove obsolete SUSE_INITRD statements (bsc#1161343)
  * Remove dma=none setting for parport_pc (bsc#1177695)
- Add README.md</changelog>
  <changelog author="mwilck@suse.com" date="1629374400">- Update to version 15.4.3:
  * fix problem that initrd may not be rebuilt after installing
    kernel-$flavor-extra (bsc#1189441)</changelog>
  <changelog author="mwilck@suse.com" date="1633089600">- Update to version 15.4.4:
  * Import kernel scriptlets from kernel-source
    (bsc#1189841, bsc#1190598)
  * Provide "suse-kernel-rpm-scriptlets"</changelog>
  <changelog author="mwilck@suse.com" date="1633348800">- Update to version 15.4.5:
  * inkmp-script(postun): don't pass  existing files to weak-modules2
    (boo#1191200)
  * kernel-scriptlets: skip cert scriptlet on non-UEFI systems
    (boo#1191260)</changelog>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.4.6:
  * rpm-script: fix bad exit status in OpenQA (bsc#1191922)
  * cert-script: Deal with existing $cert.delete file (bsc#1191804).
  * cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
  * cert-script: Only print mokutil output in verbose mode.</changelog>
  <changelog author="mwilck@suse.com" date="1634904001">- Update to version 15.4.7:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Update to version 15.4.8:
  * Same as Factory version 16.0.14
  * add udev rules from udev-extra-rules (formerly system-tuning-common-SUSE).
    Both packages are now both obsoleted by suse-module-tools.
    (jsc#SLE-21032)
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="mwilck@suse.com" date="1639396800">- Update to version 15.4.9:
  * same as Factory version 16.0.16
  * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059)
  - Rather than shipping two large files with modprobe.d options
    (00-system.conf and 50-blacklist.conf), ship multiple small
    per-module files. This makes it easier for users to override
    distribution defaults.
  * blacklist isst_if_mbox_msr (bsc#1187196)
  * boot-sysctl: make sure file exists (fix for containers)
  * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718)</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">- Update to version 15.4.10:
  * same as Factory version 16.0.17
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 15.4.11:
  * cdrom: Disable autoclose by default (boo#1165047).
  * Make regenerate-initrd-posttrans compatible with Dracut's
    UEFI mode (unified kernel image)</changelog>
  <changelog author="mwilck@suse.com" date="1643371200">- Update to version 15.4.12:
  * Add /etc/modprobe.d/README on SLE/Leap (bsc#1195051)
  * rpm-script: force-copy kernel to /boot (boo#1194501)</changelog>
  <changelog author="mwilck@suse.com" date="1667563200">- Update to version 15.4.13:
  * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 15.4.14:
  * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423)</changelog>
  <changelog author="mwilck@suse.com" date="1669032001">- Update to version 15.4.15: Backport bug fixes from factory
  * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092)
  * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391)
  * driver-check.sh: avoid false positive error messages (boo#1200107)</changelog>
  <changelog author="mwilck@suse.com" date="1675339200">- Update to version 15.4.16:
  * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)</changelog>
</package>
<package pkgid="0dd9cd9c52ace672767ea6fddb7ba086f6e9b00186c40ffb92a852a42b89b4be" name="suseconnect-ng" arch="aarch64">
  <version epoch="0" ver="1.1.0~git2.f42b4b2a060e" rel="150400.3.13.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1638360000">- Update to version 0.0.4~git0.64b80e9:
  * Makefile: also run tests under ./suseconnect
  * Switch yast-test to upstream
  * Removed examples leftover from the POC phase
  * Add HA repo to get rubygem(ffi) before it's in the baseproduct
  * Add versions and lib deps
  * Post-review cleanup
  * Package libsuseconnect and shim
  * Align with yast-registration tests
  * Fix SSLCertificate mixins
  * Fix logger crash and restore mixin
  * Removed TODO item handled separately
  * Enable debug early
  * Add package search for YaST's "Online Search"
  * Clarify Repo fields
  * Export UpdateSystem()
  * Export SystemActivations()
  * Add migration functions
  * Fix handling of IsBase attribute
  * Add missing JSONError
  * Add list_installer_updates
  * Add "update certificates"
  * Add more specific errors
  * Improved SSL error handling
  * Init defaults for get_config()
  * Improved debug logging
  * Fix error scopes
  * Fix ApiError interface
  * Added DEFAULT_CREDENTIALS_DIR const
  * get proxy credentials from curlrc
  * Forward logs from Connect to YaST
  * Separate Info logger
  * Added more TODO items
  * Simplify Config object init
  * Map Repo and Config fields to JSON
  * Add remaining fields listed in addon.rb
  * Add product_type field to product
  * First working yast part
  * Add relative path support to credentials
  * Add steps to test from yast
  * Add yast create_credentials_file
  * Add CreateCredentials() method
  * Add yast credentials()
  * Add yast announce_system - WIP
  * Add MergeJSON method for Config
  * Add readme for YaST integration
  * Fix usage text
  * Add missing -g argument
  * Fix OBS CI, it now requires target
  * Add manpage placeholder
  * Simplify packageWanted()
  * Add sorting and grouping options
  * Add local repo search and duplicate removal
  * Add basic online package search
  * Update rpm spec for zypper-search-packages-plugin
  * Add CLI for zypper search-packages plugin
  * Optional base product in package search
  * Use DefaultTransport defaults + client timeout
  * Extract ReleaseType from zypper output
  * Print failed command on zypper error like the Ruby
  * Add package_search API wrapper
  * Allow de-register/de-activate a single product
  * Improve docstring for the Status struct
  * Always show subscription information if available
  * Refactor getStatuses() to ease testing
  * Add SUMA/Uyuni check
  * Fix status output order to follow zypper product xml
  * Change GetExtensionsList() to reduce calls
  * Add the subscription name to status output
  * allow --instance-data together with --regcode
  * Post-review cleanups
  * Add selfupdate functionality
  * Handle Leap -&gt; SLES migration scenario
  * Add offline migrations support
  * Change parse error string and add block comment
  * Add disabling of obsolete repos
  * Add zypper repos listing
  * Add interactive migration selection
  * Allow loading Config from any path
  * Remove dummy flag
  * Add snapper support
  * Add zypper backup/restore functions
  * Use connect.StringSet
  * Add --query option
  * Add product and break-my-system options
  * Add note on conflicting flags
  * Check for flag contradictions
  * Add echoing output of executed commands to console
  * Move product printing out of checkProducts()
  * Split --debug and --verbose
  * Add zypper dist-upgrade part
  * Split migration code
  * Extract migration sorting
  * Expose migration(Add|Remove)Service() functions
  * Trap SIGINT/SIGTERM
  * Add zypper.RefreshRepos()
  * Expose client.upgradeProduct()
  * Add --root parameter
  * Add --migration N parameter
  * Prepare available migrations
  * Add API call to get online migration paths
  * Add system products checking
  * Add quiet logger for easier --quiet handling
  * Add zypper migration plugin implementation.
  * Export toTriplet and installReleasePackage
  * Add basic string set implementation
  * Remove quiet param from execute() and zypperRun()
  * Simplify mocking of external commands</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1641556800">- Update to version 0.0.5~git0.bbb5544:
  * Switch from rubygem-ffi to fiddle
  * Cleanup services during migration (bsc#1161891)
  * Allow non-root users to see usage text
  * Add option to not fail dup as much
  * Move APIVersion declaration to file where it is used
  * Add flag to enable/disable hwinfo test
  * Add ARM cluster count to hwinfo and fix test
  * Simplify parsing JSON error response
  * Add --gpg-auto-import-keys for zypper ref
  * Rename main.go to logging.go
  * Fix typo
  * Remove init() from the connect package
  * Move CFG variable declaration to config.go
  * Move AppName const to the file where it is used
  * Use testing.Helper() in test helpers
  * Add ppc64le support
  * Disable UUID test
  * Add test tools to BuildRequires
  * Ignore UUID errors
  * Run basic hwinfo sanity test on build service
  * Update code comments to match shim behavior.
  * Remove dependency on systemd
  * Only run httputil DumpResponse when needed</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1643198400">- Update to version 0.0.6~git0.77933db:
  * Add man pages
  * Add note in DIFFERENCES.md about abbreviated flags
  * Add -l as an alias for --list-extensions
  * Add --clean as an alias for --cleanup (bsc#1195003)
  * Suppress expected error log message in TLS test
  * Add flag to import product repo keys (bsc#1174657)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1646136000">- Update to version 0.0.6~git9.33e5847:
  * Delegate free() calls back to Go (bsc#1195729)
  * Pass "insecure" to zypper addservice
  * Workaround system cert reloading after import (bsc#1195220)
  * Extract setupHTTPClient for easier reuse
  * Exit with code 64 on connection refused like Ruby</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1648123200">- Update to version 0.0.7~git0.3ef988e:
  * Fix product tree traversal (bsc#1197398)
  * Revert "Remove self from LD_PRELOAD (bsc#1196326)"
  * Remove self from LD_PRELOAD (bsc#1196326)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
</package>
<package pkgid="e1dd5096db0c540db78b043af3068da508aa158b2d5233e4d71e113710baf936" name="suseconnect-ng" arch="s390x">
  <version epoch="0" ver="1.1.0~git2.f42b4b2a060e" rel="150400.3.13.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1638360000">- Update to version 0.0.4~git0.64b80e9:
  * Makefile: also run tests under ./suseconnect
  * Switch yast-test to upstream
  * Removed examples leftover from the POC phase
  * Add HA repo to get rubygem(ffi) before it's in the baseproduct
  * Add versions and lib deps
  * Post-review cleanup
  * Package libsuseconnect and shim
  * Align with yast-registration tests
  * Fix SSLCertificate mixins
  * Fix logger crash and restore mixin
  * Removed TODO item handled separately
  * Enable debug early
  * Add package search for YaST's "Online Search"
  * Clarify Repo fields
  * Export UpdateSystem()
  * Export SystemActivations()
  * Add migration functions
  * Fix handling of IsBase attribute
  * Add missing JSONError
  * Add list_installer_updates
  * Add "update certificates"
  * Add more specific errors
  * Improved SSL error handling
  * Init defaults for get_config()
  * Improved debug logging
  * Fix error scopes
  * Fix ApiError interface
  * Added DEFAULT_CREDENTIALS_DIR const
  * get proxy credentials from curlrc
  * Forward logs from Connect to YaST
  * Separate Info logger
  * Added more TODO items
  * Simplify Config object init
  * Map Repo and Config fields to JSON
  * Add remaining fields listed in addon.rb
  * Add product_type field to product
  * First working yast part
  * Add relative path support to credentials
  * Add steps to test from yast
  * Add yast create_credentials_file
  * Add CreateCredentials() method
  * Add yast credentials()
  * Add yast announce_system - WIP
  * Add MergeJSON method for Config
  * Add readme for YaST integration
  * Fix usage text
  * Add missing -g argument
  * Fix OBS CI, it now requires target
  * Add manpage placeholder
  * Simplify packageWanted()
  * Add sorting and grouping options
  * Add local repo search and duplicate removal
  * Add basic online package search
  * Update rpm spec for zypper-search-packages-plugin
  * Add CLI for zypper search-packages plugin
  * Optional base product in package search
  * Use DefaultTransport defaults + client timeout
  * Extract ReleaseType from zypper output
  * Print failed command on zypper error like the Ruby
  * Add package_search API wrapper
  * Allow de-register/de-activate a single product
  * Improve docstring for the Status struct
  * Always show subscription information if available
  * Refactor getStatuses() to ease testing
  * Add SUMA/Uyuni check
  * Fix status output order to follow zypper product xml
  * Change GetExtensionsList() to reduce calls
  * Add the subscription name to status output
  * allow --instance-data together with --regcode
  * Post-review cleanups
  * Add selfupdate functionality
  * Handle Leap -&gt; SLES migration scenario
  * Add offline migrations support
  * Change parse error string and add block comment
  * Add disabling of obsolete repos
  * Add zypper repos listing
  * Add interactive migration selection
  * Allow loading Config from any path
  * Remove dummy flag
  * Add snapper support
  * Add zypper backup/restore functions
  * Use connect.StringSet
  * Add --query option
  * Add product and break-my-system options
  * Add note on conflicting flags
  * Check for flag contradictions
  * Add echoing output of executed commands to console
  * Move product printing out of checkProducts()
  * Split --debug and --verbose
  * Add zypper dist-upgrade part
  * Split migration code
  * Extract migration sorting
  * Expose migration(Add|Remove)Service() functions
  * Trap SIGINT/SIGTERM
  * Add zypper.RefreshRepos()
  * Expose client.upgradeProduct()
  * Add --root parameter
  * Add --migration N parameter
  * Prepare available migrations
  * Add API call to get online migration paths
  * Add system products checking
  * Add quiet logger for easier --quiet handling
  * Add zypper migration plugin implementation.
  * Export toTriplet and installReleasePackage
  * Add basic string set implementation
  * Remove quiet param from execute() and zypperRun()
  * Simplify mocking of external commands</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1641556800">- Update to version 0.0.5~git0.bbb5544:
  * Switch from rubygem-ffi to fiddle
  * Cleanup services during migration (bsc#1161891)
  * Allow non-root users to see usage text
  * Add option to not fail dup as much
  * Move APIVersion declaration to file where it is used
  * Add flag to enable/disable hwinfo test
  * Add ARM cluster count to hwinfo and fix test
  * Simplify parsing JSON error response
  * Add --gpg-auto-import-keys for zypper ref
  * Rename main.go to logging.go
  * Fix typo
  * Remove init() from the connect package
  * Move CFG variable declaration to config.go
  * Move AppName const to the file where it is used
  * Use testing.Helper() in test helpers
  * Add ppc64le support
  * Disable UUID test
  * Add test tools to BuildRequires
  * Ignore UUID errors
  * Run basic hwinfo sanity test on build service
  * Update code comments to match shim behavior.
  * Remove dependency on systemd
  * Only run httputil DumpResponse when needed</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1643198400">- Update to version 0.0.6~git0.77933db:
  * Add man pages
  * Add note in DIFFERENCES.md about abbreviated flags
  * Add -l as an alias for --list-extensions
  * Add --clean as an alias for --cleanup (bsc#1195003)
  * Suppress expected error log message in TLS test
  * Add flag to import product repo keys (bsc#1174657)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1646136000">- Update to version 0.0.6~git9.33e5847:
  * Delegate free() calls back to Go (bsc#1195729)
  * Pass "insecure" to zypper addservice
  * Workaround system cert reloading after import (bsc#1195220)
  * Extract setupHTTPClient for easier reuse
  * Exit with code 64 on connection refused like Ruby</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1648123200">- Update to version 0.0.7~git0.3ef988e:
  * Fix product tree traversal (bsc#1197398)
  * Revert "Remove self from LD_PRELOAD (bsc#1196326)"
  * Remove self from LD_PRELOAD (bsc#1196326)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
</package>
<package pkgid="62960d2edfe21204fd11fe0ee5d5643a858811c0974b4a905f8b2e69ce415335" name="suseconnect-ng" arch="src">
  <version epoch="0" ver="1.1.0~git2.f42b4b2a060e" rel="150400.3.13.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1638360000">- Update to version 0.0.4~git0.64b80e9:
  * Makefile: also run tests under ./suseconnect
  * Switch yast-test to upstream
  * Removed examples leftover from the POC phase
  * Add HA repo to get rubygem(ffi) before it's in the baseproduct
  * Add versions and lib deps
  * Post-review cleanup
  * Package libsuseconnect and shim
  * Align with yast-registration tests
  * Fix SSLCertificate mixins
  * Fix logger crash and restore mixin
  * Removed TODO item handled separately
  * Enable debug early
  * Add package search for YaST's "Online Search"
  * Clarify Repo fields
  * Export UpdateSystem()
  * Export SystemActivations()
  * Add migration functions
  * Fix handling of IsBase attribute
  * Add missing JSONError
  * Add list_installer_updates
  * Add "update certificates"
  * Add more specific errors
  * Improved SSL error handling
  * Init defaults for get_config()
  * Improved debug logging
  * Fix error scopes
  * Fix ApiError interface
  * Added DEFAULT_CREDENTIALS_DIR const
  * get proxy credentials from curlrc
  * Forward logs from Connect to YaST
  * Separate Info logger
  * Added more TODO items
  * Simplify Config object init
  * Map Repo and Config fields to JSON
  * Add remaining fields listed in addon.rb
  * Add product_type field to product
  * First working yast part
  * Add relative path support to credentials
  * Add steps to test from yast
  * Add yast create_credentials_file
  * Add CreateCredentials() method
  * Add yast credentials()
  * Add yast announce_system - WIP
  * Add MergeJSON method for Config
  * Add readme for YaST integration
  * Fix usage text
  * Add missing -g argument
  * Fix OBS CI, it now requires target
  * Add manpage placeholder
  * Simplify packageWanted()
  * Add sorting and grouping options
  * Add local repo search and duplicate removal
  * Add basic online package search
  * Update rpm spec for zypper-search-packages-plugin
  * Add CLI for zypper search-packages plugin
  * Optional base product in package search
  * Use DefaultTransport defaults + client timeout
  * Extract ReleaseType from zypper output
  * Print failed command on zypper error like the Ruby
  * Add package_search API wrapper
  * Allow de-register/de-activate a single product
  * Improve docstring for the Status struct
  * Always show subscription information if available
  * Refactor getStatuses() to ease testing
  * Add SUMA/Uyuni check
  * Fix status output order to follow zypper product xml
  * Change GetExtensionsList() to reduce calls
  * Add the subscription name to status output
  * allow --instance-data together with --regcode
  * Post-review cleanups
  * Add selfupdate functionality
  * Handle Leap -&gt; SLES migration scenario
  * Add offline migrations support
  * Change parse error string and add block comment
  * Add disabling of obsolete repos
  * Add zypper repos listing
  * Add interactive migration selection
  * Allow loading Config from any path
  * Remove dummy flag
  * Add snapper support
  * Add zypper backup/restore functions
  * Use connect.StringSet
  * Add --query option
  * Add product and break-my-system options
  * Add note on conflicting flags
  * Check for flag contradictions
  * Add echoing output of executed commands to console
  * Move product printing out of checkProducts()
  * Split --debug and --verbose
  * Add zypper dist-upgrade part
  * Split migration code
  * Extract migration sorting
  * Expose migration(Add|Remove)Service() functions
  * Trap SIGINT/SIGTERM
  * Add zypper.RefreshRepos()
  * Expose client.upgradeProduct()
  * Add --root parameter
  * Add --migration N parameter
  * Prepare available migrations
  * Add API call to get online migration paths
  * Add system products checking
  * Add quiet logger for easier --quiet handling
  * Add zypper migration plugin implementation.
  * Export toTriplet and installReleasePackage
  * Add basic string set implementation
  * Remove quiet param from execute() and zypperRun()
  * Simplify mocking of external commands</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1641556800">- Update to version 0.0.5~git0.bbb5544:
  * Switch from rubygem-ffi to fiddle
  * Cleanup services during migration (bsc#1161891)
  * Allow non-root users to see usage text
  * Add option to not fail dup as much
  * Move APIVersion declaration to file where it is used
  * Add flag to enable/disable hwinfo test
  * Add ARM cluster count to hwinfo and fix test
  * Simplify parsing JSON error response
  * Add --gpg-auto-import-keys for zypper ref
  * Rename main.go to logging.go
  * Fix typo
  * Remove init() from the connect package
  * Move CFG variable declaration to config.go
  * Move AppName const to the file where it is used
  * Use testing.Helper() in test helpers
  * Add ppc64le support
  * Disable UUID test
  * Add test tools to BuildRequires
  * Ignore UUID errors
  * Run basic hwinfo sanity test on build service
  * Update code comments to match shim behavior.
  * Remove dependency on systemd
  * Only run httputil DumpResponse when needed</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1643198400">- Update to version 0.0.6~git0.77933db:
  * Add man pages
  * Add note in DIFFERENCES.md about abbreviated flags
  * Add -l as an alias for --list-extensions
  * Add --clean as an alias for --cleanup (bsc#1195003)
  * Suppress expected error log message in TLS test
  * Add flag to import product repo keys (bsc#1174657)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1646136000">- Update to version 0.0.6~git9.33e5847:
  * Delegate free() calls back to Go (bsc#1195729)
  * Pass "insecure" to zypper addservice
  * Workaround system cert reloading after import (bsc#1195220)
  * Extract setupHTTPClient for easier reuse
  * Exit with code 64 on connection refused like Ruby</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1648123200">- Update to version 0.0.7~git0.3ef988e:
  * Fix product tree traversal (bsc#1197398)
  * Revert "Remove self from LD_PRELOAD (bsc#1196326)"
  * Remove self from LD_PRELOAD (bsc#1196326)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
</package>
<package pkgid="5e181c08e6fd43af240c6a8bb5f0abf29ea6f282ef17aa09237f0aa0196690a5" name="suseconnect-ng" arch="x86_64">
  <version epoch="0" ver="1.1.0~git2.f42b4b2a060e" rel="150400.3.13.1"/>
  <changelog author="jan.suse@zerebecki.de" date="1638360000">- Update to version 0.0.4~git0.64b80e9:
  * Makefile: also run tests under ./suseconnect
  * Switch yast-test to upstream
  * Removed examples leftover from the POC phase
  * Add HA repo to get rubygem(ffi) before it's in the baseproduct
  * Add versions and lib deps
  * Post-review cleanup
  * Package libsuseconnect and shim
  * Align with yast-registration tests
  * Fix SSLCertificate mixins
  * Fix logger crash and restore mixin
  * Removed TODO item handled separately
  * Enable debug early
  * Add package search for YaST's "Online Search"
  * Clarify Repo fields
  * Export UpdateSystem()
  * Export SystemActivations()
  * Add migration functions
  * Fix handling of IsBase attribute
  * Add missing JSONError
  * Add list_installer_updates
  * Add "update certificates"
  * Add more specific errors
  * Improved SSL error handling
  * Init defaults for get_config()
  * Improved debug logging
  * Fix error scopes
  * Fix ApiError interface
  * Added DEFAULT_CREDENTIALS_DIR const
  * get proxy credentials from curlrc
  * Forward logs from Connect to YaST
  * Separate Info logger
  * Added more TODO items
  * Simplify Config object init
  * Map Repo and Config fields to JSON
  * Add remaining fields listed in addon.rb
  * Add product_type field to product
  * First working yast part
  * Add relative path support to credentials
  * Add steps to test from yast
  * Add yast create_credentials_file
  * Add CreateCredentials() method
  * Add yast credentials()
  * Add yast announce_system - WIP
  * Add MergeJSON method for Config
  * Add readme for YaST integration
  * Fix usage text
  * Add missing -g argument
  * Fix OBS CI, it now requires target
  * Add manpage placeholder
  * Simplify packageWanted()
  * Add sorting and grouping options
  * Add local repo search and duplicate removal
  * Add basic online package search
  * Update rpm spec for zypper-search-packages-plugin
  * Add CLI for zypper search-packages plugin
  * Optional base product in package search
  * Use DefaultTransport defaults + client timeout
  * Extract ReleaseType from zypper output
  * Print failed command on zypper error like the Ruby
  * Add package_search API wrapper
  * Allow de-register/de-activate a single product
  * Improve docstring for the Status struct
  * Always show subscription information if available
  * Refactor getStatuses() to ease testing
  * Add SUMA/Uyuni check
  * Fix status output order to follow zypper product xml
  * Change GetExtensionsList() to reduce calls
  * Add the subscription name to status output
  * allow --instance-data together with --regcode
  * Post-review cleanups
  * Add selfupdate functionality
  * Handle Leap -&gt; SLES migration scenario
  * Add offline migrations support
  * Change parse error string and add block comment
  * Add disabling of obsolete repos
  * Add zypper repos listing
  * Add interactive migration selection
  * Allow loading Config from any path
  * Remove dummy flag
  * Add snapper support
  * Add zypper backup/restore functions
  * Use connect.StringSet
  * Add --query option
  * Add product and break-my-system options
  * Add note on conflicting flags
  * Check for flag contradictions
  * Add echoing output of executed commands to console
  * Move product printing out of checkProducts()
  * Split --debug and --verbose
  * Add zypper dist-upgrade part
  * Split migration code
  * Extract migration sorting
  * Expose migration(Add|Remove)Service() functions
  * Trap SIGINT/SIGTERM
  * Add zypper.RefreshRepos()
  * Expose client.upgradeProduct()
  * Add --root parameter
  * Add --migration N parameter
  * Prepare available migrations
  * Add API call to get online migration paths
  * Add system products checking
  * Add quiet logger for easier --quiet handling
  * Add zypper migration plugin implementation.
  * Export toTriplet and installReleasePackage
  * Add basic string set implementation
  * Remove quiet param from execute() and zypperRun()
  * Simplify mocking of external commands</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1641556800">- Update to version 0.0.5~git0.bbb5544:
  * Switch from rubygem-ffi to fiddle
  * Cleanup services during migration (bsc#1161891)
  * Allow non-root users to see usage text
  * Add option to not fail dup as much
  * Move APIVersion declaration to file where it is used
  * Add flag to enable/disable hwinfo test
  * Add ARM cluster count to hwinfo and fix test
  * Simplify parsing JSON error response
  * Add --gpg-auto-import-keys for zypper ref
  * Rename main.go to logging.go
  * Fix typo
  * Remove init() from the connect package
  * Move CFG variable declaration to config.go
  * Move AppName const to the file where it is used
  * Use testing.Helper() in test helpers
  * Add ppc64le support
  * Disable UUID test
  * Add test tools to BuildRequires
  * Ignore UUID errors
  * Run basic hwinfo sanity test on build service
  * Update code comments to match shim behavior.
  * Remove dependency on systemd
  * Only run httputil DumpResponse when needed</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1643198400">- Update to version 0.0.6~git0.77933db:
  * Add man pages
  * Add note in DIFFERENCES.md about abbreviated flags
  * Add -l as an alias for --list-extensions
  * Add --clean as an alias for --cleanup (bsc#1195003)
  * Suppress expected error log message in TLS test
  * Add flag to import product repo keys (bsc#1174657)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1646136000">- Update to version 0.0.6~git9.33e5847:
  * Delegate free() calls back to Go (bsc#1195729)
  * Pass "insecure" to zypper addservice
  * Workaround system cert reloading after import (bsc#1195220)
  * Extract setupHTTPClient for easier reuse
  * Exit with code 64 on connection refused like Ruby</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1648123200">- Update to version 0.0.7~git0.3ef988e:
  * Fix product tree traversal (bsc#1197398)
  * Revert "Remove self from LD_PRELOAD (bsc#1196326)"
  * Remove self from LD_PRELOAD (bsc#1196326)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
  <changelog author="tschmidt@suse.com" date="1670932800">- Update to version 1.0.0~git14.17a7901:
  * Don't write system_token to service credentials files
  * Allow non-root users to use --version
  * Add: ExcludeArch: %ix86 s390 ppc64 to the .spec file, so we skip builds for unsupported architectures.
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
  * Fix keepalive feature notice during installation
  * Fix requires for all rhel clone distributions like alma, rocky...</changelog>
  <changelog author="tschmidt@suse.com" date="1678276800">- Update to version 1.0.0~git19.b225bc3:
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Update README.md
  * Add deactivate API to ruby bindings (bsc#1202705)</changelog>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
</package>
<package pkgid="bebb3afd1e31b749ae36a650519e40200878464eb8b9b44b676eec9a2931b566" name="system-group-audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="1535adab87692cec034f6359316095ae4852aeb36d5a08eaeb4d36739f882d0a" name="system-group-audit" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="eca185737f34852539ce39e69e1c6253db52fa1c8d09a98649e97f5400bd9dc7" name="system-group-audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="b323e10b752666d55d31b0493583da068cef0c7748d0931ca04fa84a189581ae" name="systemd" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="7b8dadc47e6b6b545a19c8b364203c237da6dc6deb6f842dcea60b65293f5ff8" name="systemd" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="358745e3298104a3beb053428e4d728bf0ab577492b0a5f3d6e4fbead164b4b9" name="systemd" arch="src">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="704ec92d40ba1812ba3fcbce0f48cf44931efba127418ae49181393f416eedc2" name="systemd" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="ed6f82a06a0e841ab51b449fbf426d5411c65d4657a6b889c97bd35c08597d53" name="systemd-container" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="a535719cd5f755bc439116fa9a173b892c71df862a6636e88cd7749f9ac650b5" name="systemd-container" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="ee9d1f81470d38d5620db28d5d00e1d11aec80482b02f17d2bd72cf3b2e2b01a" name="systemd-container" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="85de5aa28b2db5f09147f35d0f098175af25b5b55abecd5f4008dc3e3ba7187d" name="systemd-journal-remote" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="217b10d2d088b681907a3cddcb45977b46302a3f8191f219996a012389d7c3eb" name="systemd-journal-remote" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="83dfdaf67af5b588ae5b9e26d3057cd194e6626e9372a19bb1fe2c438e8319ae" name="systemd-journal-remote" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="88998286ddd694c6a8f85c341493ea0c8d1b52bb09ecddb3c2279f63c9c29940" name="systemd-rpm-macros" arch="noarch">
  <version epoch="0" ver="13" rel="150000.7.33.1"/>
  <changelog author="fbui@suse.com" date="1614945600">- Tabify %service_del_postun_without_restart
  To make it consistent with the other macros.
  No functional change.</changelog>
  <changelog author="alarrosa@suse.com" date="1614945601">- Fix %systemd_user_post (boo#1183051, boo#1182661)
  The --global parameter was handled as if it was another service name
  so %systemd_user_post wasn't working properly. Replace
  %systemd_user_post with the code from %service_add_post it was being
  expanded to but correctly passing --global to systemctl.</changelog>
  <changelog author="alarrosa@suse.com" date="1614945602">- Add a %systemd_user_pre macro (boo#1183051, boo#1183012)
  It creates a /run/systemd/rpm/needs-user-preset/$service file for
  each new service being installed so %systemd_user_post can call
  `systemctl --global preset $service` properly for newly installed
  user services (even when it's introduced via a package update).</changelog>
  <changelog author="fbui@suse.com" date="1614945603">- Don't pass -f to rm to make sure that rm failures will be logged
  But also make sure to not abort the scriptlet prematurely if rm
  fails.</changelog>
  <changelog author="fbui@suse.com" date="1614945604">- Remove confusing --user before --global in %systemd_user_preun
  It's actually a backport of upstream commit
  28d36da64a7a23a55e8d0a139f2620384fd058b3
- Update a few comments</changelog>
  <changelog author="fbui@suse.com" date="1614945605">- Bump to version 7</changelog>
  <changelog author="fbui@suse.com" date="1621944000">- %sysusers_create_inline: use here-docs instead of echo (bsc#1186282)
  Upstream commit dd2490ae12ad1e1795ecbf8f8944b950da9c8d06.</changelog>
  <changelog author="fbui@suse.com" date="1626436800">- Introduce %sysusers_create_package
  %sysusers_create and %sysusers_create_inline are now deprecated and
  the new macro should be used instead.
  Upstream commit 07a7d4a0040d221ff09e527e91c112b4ffab1dba.</changelog>
  <changelog author="fbui@suse.com" date="1626436801">- Make use of "Suggests:" in %systemd_ordering
  Until libzypp supports "OrderWithRequires:", we need to specify a
  similar ordering constraint that can be understood by the dep solver
  as well. Hence the use of "Suggests:" in %systemd_ordering
  (workaround for bsc#1187332).</changelog>
  <changelog author="fbui@suse.com" date="1626436802">- Bump to version 8</changelog>
  <changelog author="fbui@suse.com" date="1637150400">- Introduce %_systemd_util_dir
  It's a backport of upstream commit 3bc66bfa0136e370a8f7b06c3b69a52f5636ef82.</changelog>
  <changelog author="fbui@suse.com" date="1637150401">- Bump version to 9</changelog>
  <changelog author="fbui@suse.com" date="1642593600">- %sysusers_create_inline was wrongly marked as deprecated
- %sysusers_create can be useful in certain cases and won't go away until we'll
  move to file triggers. So don't mark it as deprecated too</changelog>
  <changelog author="fbui@suse.com" date="1642593601">- Bump version to 10</changelog>
  <changelog author="fbui@suse.com" date="1646308800">- Make %_modprobedir point to /lib/modprobe.d (bsc#1196275 bsc#1196406)
  Until SLE15-SP3:QU2, /usr/lib/modprobe.d path was not supported by kmod and
  since SLE15-SP4 /etc/modprobe.d/README has references to /lib/modprobe.d...</changelog>
  <changelog author="fbui@suse.com" date="1646308801">- Bump version to 11</changelog>
  <changelog author="fbui@suse.com" date="1676548800">- Don't emit a warning when the flag file in /var/lib/systemd/migrated/ is not
  present as it's expected (bsc#1208079).</changelog>
  <changelog author="fbui@suse.com" date="1676548801">- Bump version to 12</changelog>
  <changelog author="fbui@suse.com" date="1683720000">- Fix %sysctl_apply() and %binfmt_apply() so they are disabled when called from
  a chroot (bsc#1211272)</changelog>
  <changelog author="fbui@suse.com" date="1683720001">- Bump version to 13</changelog>
</package>
<package pkgid="3c3ae3e74d781beef8a82fe695bfee605bf48eea976a1a4228490dc22e8fe33c" name="systemd-rpm-macros" arch="src">
  <version epoch="0" ver="13" rel="150000.7.33.1"/>
  <changelog author="fbui@suse.com" date="1614945600">- Tabify %service_del_postun_without_restart
  To make it consistent with the other macros.
  No functional change.</changelog>
  <changelog author="alarrosa@suse.com" date="1614945601">- Fix %systemd_user_post (boo#1183051, boo#1182661)
  The --global parameter was handled as if it was another service name
  so %systemd_user_post wasn't working properly. Replace
  %systemd_user_post with the code from %service_add_post it was being
  expanded to but correctly passing --global to systemctl.</changelog>
  <changelog author="alarrosa@suse.com" date="1614945602">- Add a %systemd_user_pre macro (boo#1183051, boo#1183012)
  It creates a /run/systemd/rpm/needs-user-preset/$service file for
  each new service being installed so %systemd_user_post can call
  `systemctl --global preset $service` properly for newly installed
  user services (even when it's introduced via a package update).</changelog>
  <changelog author="fbui@suse.com" date="1614945603">- Don't pass -f to rm to make sure that rm failures will be logged
  But also make sure to not abort the scriptlet prematurely if rm
  fails.</changelog>
  <changelog author="fbui@suse.com" date="1614945604">- Remove confusing --user before --global in %systemd_user_preun
  It's actually a backport of upstream commit
  28d36da64a7a23a55e8d0a139f2620384fd058b3
- Update a few comments</changelog>
  <changelog author="fbui@suse.com" date="1614945605">- Bump to version 7</changelog>
  <changelog author="fbui@suse.com" date="1621944000">- %sysusers_create_inline: use here-docs instead of echo (bsc#1186282)
  Upstream commit dd2490ae12ad1e1795ecbf8f8944b950da9c8d06.</changelog>
  <changelog author="fbui@suse.com" date="1626436800">- Introduce %sysusers_create_package
  %sysusers_create and %sysusers_create_inline are now deprecated and
  the new macro should be used instead.
  Upstream commit 07a7d4a0040d221ff09e527e91c112b4ffab1dba.</changelog>
  <changelog author="fbui@suse.com" date="1626436801">- Make use of "Suggests:" in %systemd_ordering
  Until libzypp supports "OrderWithRequires:", we need to specify a
  similar ordering constraint that can be understood by the dep solver
  as well. Hence the use of "Suggests:" in %systemd_ordering
  (workaround for bsc#1187332).</changelog>
  <changelog author="fbui@suse.com" date="1626436802">- Bump to version 8</changelog>
  <changelog author="fbui@suse.com" date="1637150400">- Introduce %_systemd_util_dir
  It's a backport of upstream commit 3bc66bfa0136e370a8f7b06c3b69a52f5636ef82.</changelog>
  <changelog author="fbui@suse.com" date="1637150401">- Bump version to 9</changelog>
  <changelog author="fbui@suse.com" date="1642593600">- %sysusers_create_inline was wrongly marked as deprecated
- %sysusers_create can be useful in certain cases and won't go away until we'll
  move to file triggers. So don't mark it as deprecated too</changelog>
  <changelog author="fbui@suse.com" date="1642593601">- Bump version to 10</changelog>
  <changelog author="fbui@suse.com" date="1646308800">- Make %_modprobedir point to /lib/modprobe.d (bsc#1196275 bsc#1196406)
  Until SLE15-SP3:QU2, /usr/lib/modprobe.d path was not supported by kmod and
  since SLE15-SP4 /etc/modprobe.d/README has references to /lib/modprobe.d...</changelog>
  <changelog author="fbui@suse.com" date="1646308801">- Bump version to 11</changelog>
  <changelog author="fbui@suse.com" date="1676548800">- Don't emit a warning when the flag file in /var/lib/systemd/migrated/ is not
  present as it's expected (bsc#1208079).</changelog>
  <changelog author="fbui@suse.com" date="1676548801">- Bump version to 12</changelog>
  <changelog author="fbui@suse.com" date="1683720000">- Fix %sysctl_apply() and %binfmt_apply() so they are disabled when called from
  a chroot (bsc#1211272)</changelog>
  <changelog author="fbui@suse.com" date="1683720001">- Bump version to 13</changelog>
</package>
<package pkgid="235e92703f249408bc34ebbddfe256f5a064295e8d858467a734f60d7114383f" name="systemd-sysvinit" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="127dc060c82cbd3b8afe3994454a5813eada44fd8cf1ef4117de49d32be00fdc" name="systemd-sysvinit" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="ea1fa63a7119059c80cf9e5fb15e30fa9ba41a2cf477a928f43a85acbb456252" name="systemd-sysvinit" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="ee7ffdc57757fa092aeb2f8acdc66812f128ea6d9ba238ca0001094ff683fc01" name="tcl" arch="aarch64">
  <version epoch="0" ver="8.6.12" rel="150300.14.9.1"/>
  <changelog author="max@suse.com" date="1506340800">- Whitelist known-failing tests. Further investigation needed.</changelog>
  <changelog author="max@suse.com" date="1508414400">- Sync SLE12 with Factory to fix a bug in Itcl that was affecting
  iwidgets (bsc#903017).</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1513252800">- Add more tests in Whitelist as bypass boo#1072657
  identified following tests failed on PowerPC
  interp-34.9 interp-34.13 http-3.25 timer-2.1 thread-20.9</changelog>
  <changelog author="mls@suse.de" date="1513252801">- adapt check section for rpm-4.14.0</changelog>
  <changelog author="max@suse.com" date="1514548800">- Version 8.6.8:
  * [array names -regexp] supports backrefs
  * Fix gcc build failures due to #pragma placement
  * (bug)[b50fb2] exec redir append stdout and stderr to file
  * (bug)[2a9465] http state 100 continue handling broken
  * (bug)[0e4d88] replace command, delete trace kills namespace
  * (bug)[1a5655] [info * methods] includes mixins
  * (bug)[fc1409] segfault in method cloning, oo-15.15
  * (bug)[3298012] Stop crash when hash tables overflow 32 bits
  * (bug)[5d6de6] Close failing case of [package prefer stable]
  * (bug)[4f6a1e] Crash when ensemble map and list are same
  * (bug)[ce3a21] file normalize failure when tail is empty
  * (new)[TIP 477] nmake build system reform
  * (bug)[586e71] EvalObjv exception handling at level #0</changelog>
  <changelog author="ro@suse.de" date="1521115200">- handle s390 like s390x (bnc#1085480)</changelog>
  <changelog author="max@suse.com" date="1544616000">- New version: 8.6.9:
  * NR-enable [package require]
  * (bug)[9fd5c6] crash in object deletion, test oo-11.5
  * (bug)[3c32a3] crash deleting object with class mixed in
  * (platform) stop using -lieee, removed from glibc-2.27
    (bsc#1179615, bsc#1181840).
  * (bug)[8e6a9a] bad binary [string match], test string-11.55
  * (bug)[1873ea] repair multi-thread std channel init
  * (bug)[db36fa] broken bytecode for index values
  * (bug) broken compiled [string replace], test string-14.19
  * (bug) [string trim*] engine crashed on invalid UTF
  * (bug) missing trace in compiled [array set], test var-20.11
  * (bug)[46a241] crash in unset array with search, var-13.[23]
  * (bug)[27b682] race made [file delete] raise "no such file"
  * (bug)[925643] 32/64 cleanup of filesystem DIR operations
  * (bug) leaks in TclSetEnv and env cache
  * (bug)[3592747] [yieldto] dying namespace, tailcall-14.1
  * (bug)[270f78] race in [file mkdir]
  * (bug)[3f7af0] [file delete] raised "permission denied"
  * (bug)[d051b7] overflow crash in [format]
  * revised quoting of [exec] args in generated command line
  * HTTP Keep-Alive with pipelined requests
  * (new)[TIP 505] [lreplace] accepts all out of range indices
  * (bug) Prevent crash from NULL keyName in the registry package
  * Update tcltest package for Travis support
  * (bug)[35a8f1] overlong string length of some lists
  * (bug)[00d04c] Repair [binary encode base64]</changelog>
  <changelog author="max@suse.com" date="1547726400">- Fix a regression in the handling of denormalized empty lists
  (tcl-expand-regression.patch, tcl#cc1e91552c).</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Use FAT LTO objects in order to provide proper static
  library (boo#1138797).</changelog>
  <changelog author="schwab@suse.de" date="1562673600">- binary-40.3 is expected to fail on riscv64 which does not support NaN
  propagation</changelog>
  <changelog author="max@suse.com" date="1575374400">- New version: 8.6.10:
  * (bug)[7a9dc5] [file normalize ~/~foo] segfault
  * (bug)[3cf3a9] variable 'timezone' deprecated in vc2017
  * (bug)[cc1e91] [list [list {*}[set a " "]]] regression
    obsoletes tcl-expand-regression.patch.
  * (bug)[e3f481] tests var-1.2[01]
  * (new) Update to Unicode 12.0
  * (new)[TIP 527] New command [timerate]
  * (bug)[39fed4] [package require] memory validity
  * (new) New command tcl::unsupported::corotype
  * (bug) memlink when namespace deletion kills linked var
  * (new) README file converted to README.md in Markdown
  * (bug)[8b9854] [info level 0] regression with ensembles
  * (bug)[6bdadf] crash multi-arg write-traced [lappend]
  * (bug)[f8a33c] crash Tcl_Exit before init
  * (bug)[fa6bf3] Bytecode fails epoch recovery at numLevel=0
  * (bug)[fec0c1] C stack overflow compiling bytecode
  * tzdata updated to Olson's tzdata2019c
  * (bug)[16768d] Fix [info hostname] on NetBSD
  * (new) libtommath updated to release 1.2.0
  * (bug)[bcd100] bad fs cache when system encoding changes
  * (bug)[135804] segfault in [next] after destroy
  * (bug)[13657a] application/json us text, not binary</changelog>
  <changelog author="dimstar@opensuse.org" date="1602244800">- Fix build with RPM 4.16: error: bare words are no longer
  supported, please use "...":  lib64 == lib64.</changelog>
  <changelog author="max@suse.com" date="1605873600">- Add a manpage symlink for tclsh8.6.</changelog>
  <changelog author="max@suse.com" date="1609761600">- New version: 8.6.11:
  * Add tcltest::(Setup|Eval|Cleanup|)Test
  * Update to Unicode-13
  * Add 3 libtommath functions to stub table
  * Many more bug fixes
- Potentially incompatible changes:
  * (bug)[ffeb20] [binary decode base64] ignore invalid chars
  * (bug)[b8e82d] some -maxlen values break uuencode round trip
  * (bug)[085913] Tcl_DStringAppendElement # quoting precision
  * (bug)[81242a] revised documentation for Tcl_UtfAtIndex()
  * (bug)[ed2980] Tcl_UtfToUniChar reads &gt; TCL_UTF_MAX bytes
  * (bug)[a1bd37] [clock scan] new ISO format (clock-34.(19-24))
  * (bug)[501974] [clock scan] +time zone (clock-34.(53-68))
  * (new) force -eofchar \032 when evaluating library scripts
  * (new)[48898a] improve error message consistency
  * (new) revised case of module names</changelog>
  <changelog author="max@suse.com" date="1610625600">- tclConfig.sh: Fix path names and avoid braces in TCL_PACKAGE_PATH
- Set TCL_LIBRARY at configure time for better consistency.</changelog>
  <changelog author="max@suse.com" date="1620216000">- bsc#1185662: Move tcl.macros /usr/lib/rpm/macros.d .
- https://core.tcl-lang.org/thread/tktview?name=98ae20f0f5:
  Add tcl-aa4a13c15516da45.patch to disable lto for the stubs
  libraries.</changelog>
  <changelog author="max@suse.com" date="1636459200">- New version 8.6.12:
  * (bug)[d43f96] [string trim*] broken for Emoji
  * (bug)[22324b] [string reverse] broken for Emoji
  * (bug)[1dab71,7c64aa] BRE broken by uninitialized value use
  * (bug)[8419c5] Unix tty channels tolerate EINTR
  * ** POTENTIAL INCOMPATIBILITY ***
  * (bug)[4c591f] [string compare] EIAS violation
  * (bug)[266494] [concat foo [list #]] EIAS violation
  * (bug)[24b918] Save IO buffers from modern optimizers
  * (new) support for POSIX error EILSEQ
  * (bug)[688fcc] segfault during traced delete of alias
  * (bug)[ccc448] segfault in ensemble rewrite machinery
  * (new) Update to Unicode-14
  * (bug)[a8579d] failed proc argument spec processing
  * Obsoletes tcl-aa4a13c15516da45.patch
- Bump %itclver and ensure it stays in sync.</changelog>
  <changelog author="max@suse.com" date="1648555200">- Remove the SQLite extension and package it as a subpackage of
  sqlite3 to have only a single copy and keep it more up to date
  (bsc#1195773).
- Clean up the lib dependencies in tclConfig.sh and tcl.pc.</changelog>
  <changelog author="max@suse.com" date="1663848000">- Fix a race condition in test socket-13.1
  (tcl-test-socket-13.1.patch).</changelog>
  <changelog author="max@suse.com" date="1673956800">- [bsc#1206623], tcl-string-compare.patch:
  Fix [string compare -length] on big endian and improve
  [string equal] on little endian.</changelog>
</package>
<package pkgid="d31556e21dbc1352adb34a78507d050b225eddbd5d12a182a0c998cc80153148" name="tcl" arch="s390x">
  <version epoch="0" ver="8.6.12" rel="150300.14.9.1"/>
  <changelog author="max@suse.com" date="1506340800">- Whitelist known-failing tests. Further investigation needed.</changelog>
  <changelog author="max@suse.com" date="1508414400">- Sync SLE12 with Factory to fix a bug in Itcl that was affecting
  iwidgets (bsc#903017).</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1513252800">- Add more tests in Whitelist as bypass boo#1072657
  identified following tests failed on PowerPC
  interp-34.9 interp-34.13 http-3.25 timer-2.1 thread-20.9</changelog>
  <changelog author="mls@suse.de" date="1513252801">- adapt check section for rpm-4.14.0</changelog>
  <changelog author="max@suse.com" date="1514548800">- Version 8.6.8:
  * [array names -regexp] supports backrefs
  * Fix gcc build failures due to #pragma placement
  * (bug)[b50fb2] exec redir append stdout and stderr to file
  * (bug)[2a9465] http state 100 continue handling broken
  * (bug)[0e4d88] replace command, delete trace kills namespace
  * (bug)[1a5655] [info * methods] includes mixins
  * (bug)[fc1409] segfault in method cloning, oo-15.15
  * (bug)[3298012] Stop crash when hash tables overflow 32 bits
  * (bug)[5d6de6] Close failing case of [package prefer stable]
  * (bug)[4f6a1e] Crash when ensemble map and list are same
  * (bug)[ce3a21] file normalize failure when tail is empty
  * (new)[TIP 477] nmake build system reform
  * (bug)[586e71] EvalObjv exception handling at level #0</changelog>
  <changelog author="ro@suse.de" date="1521115200">- handle s390 like s390x (bnc#1085480)</changelog>
  <changelog author="max@suse.com" date="1544616000">- New version: 8.6.9:
  * NR-enable [package require]
  * (bug)[9fd5c6] crash in object deletion, test oo-11.5
  * (bug)[3c32a3] crash deleting object with class mixed in
  * (platform) stop using -lieee, removed from glibc-2.27
    (bsc#1179615, bsc#1181840).
  * (bug)[8e6a9a] bad binary [string match], test string-11.55
  * (bug)[1873ea] repair multi-thread std channel init
  * (bug)[db36fa] broken bytecode for index values
  * (bug) broken compiled [string replace], test string-14.19
  * (bug) [string trim*] engine crashed on invalid UTF
  * (bug) missing trace in compiled [array set], test var-20.11
  * (bug)[46a241] crash in unset array with search, var-13.[23]
  * (bug)[27b682] race made [file delete] raise "no such file"
  * (bug)[925643] 32/64 cleanup of filesystem DIR operations
  * (bug) leaks in TclSetEnv and env cache
  * (bug)[3592747] [yieldto] dying namespace, tailcall-14.1
  * (bug)[270f78] race in [file mkdir]
  * (bug)[3f7af0] [file delete] raised "permission denied"
  * (bug)[d051b7] overflow crash in [format]
  * revised quoting of [exec] args in generated command line
  * HTTP Keep-Alive with pipelined requests
  * (new)[TIP 505] [lreplace] accepts all out of range indices
  * (bug) Prevent crash from NULL keyName in the registry package
  * Update tcltest package for Travis support
  * (bug)[35a8f1] overlong string length of some lists
  * (bug)[00d04c] Repair [binary encode base64]</changelog>
  <changelog author="max@suse.com" date="1547726400">- Fix a regression in the handling of denormalized empty lists
  (tcl-expand-regression.patch, tcl#cc1e91552c).</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Use FAT LTO objects in order to provide proper static
  library (boo#1138797).</changelog>
  <changelog author="schwab@suse.de" date="1562673600">- binary-40.3 is expected to fail on riscv64 which does not support NaN
  propagation</changelog>
  <changelog author="max@suse.com" date="1575374400">- New version: 8.6.10:
  * (bug)[7a9dc5] [file normalize ~/~foo] segfault
  * (bug)[3cf3a9] variable 'timezone' deprecated in vc2017
  * (bug)[cc1e91] [list [list {*}[set a " "]]] regression
    obsoletes tcl-expand-regression.patch.
  * (bug)[e3f481] tests var-1.2[01]
  * (new) Update to Unicode 12.0
  * (new)[TIP 527] New command [timerate]
  * (bug)[39fed4] [package require] memory validity
  * (new) New command tcl::unsupported::corotype
  * (bug) memlink when namespace deletion kills linked var
  * (new) README file converted to README.md in Markdown
  * (bug)[8b9854] [info level 0] regression with ensembles
  * (bug)[6bdadf] crash multi-arg write-traced [lappend]
  * (bug)[f8a33c] crash Tcl_Exit before init
  * (bug)[fa6bf3] Bytecode fails epoch recovery at numLevel=0
  * (bug)[fec0c1] C stack overflow compiling bytecode
  * tzdata updated to Olson's tzdata2019c
  * (bug)[16768d] Fix [info hostname] on NetBSD
  * (new) libtommath updated to release 1.2.0
  * (bug)[bcd100] bad fs cache when system encoding changes
  * (bug)[135804] segfault in [next] after destroy
  * (bug)[13657a] application/json us text, not binary</changelog>
  <changelog author="dimstar@opensuse.org" date="1602244800">- Fix build with RPM 4.16: error: bare words are no longer
  supported, please use "...":  lib64 == lib64.</changelog>
  <changelog author="max@suse.com" date="1605873600">- Add a manpage symlink for tclsh8.6.</changelog>
  <changelog author="max@suse.com" date="1609761600">- New version: 8.6.11:
  * Add tcltest::(Setup|Eval|Cleanup|)Test
  * Update to Unicode-13
  * Add 3 libtommath functions to stub table
  * Many more bug fixes
- Potentially incompatible changes:
  * (bug)[ffeb20] [binary decode base64] ignore invalid chars
  * (bug)[b8e82d] some -maxlen values break uuencode round trip
  * (bug)[085913] Tcl_DStringAppendElement # quoting precision
  * (bug)[81242a] revised documentation for Tcl_UtfAtIndex()
  * (bug)[ed2980] Tcl_UtfToUniChar reads &gt; TCL_UTF_MAX bytes
  * (bug)[a1bd37] [clock scan] new ISO format (clock-34.(19-24))
  * (bug)[501974] [clock scan] +time zone (clock-34.(53-68))
  * (new) force -eofchar \032 when evaluating library scripts
  * (new)[48898a] improve error message consistency
  * (new) revised case of module names</changelog>
  <changelog author="max@suse.com" date="1610625600">- tclConfig.sh: Fix path names and avoid braces in TCL_PACKAGE_PATH
- Set TCL_LIBRARY at configure time for better consistency.</changelog>
  <changelog author="max@suse.com" date="1620216000">- bsc#1185662: Move tcl.macros /usr/lib/rpm/macros.d .
- https://core.tcl-lang.org/thread/tktview?name=98ae20f0f5:
  Add tcl-aa4a13c15516da45.patch to disable lto for the stubs
  libraries.</changelog>
  <changelog author="max@suse.com" date="1636459200">- New version 8.6.12:
  * (bug)[d43f96] [string trim*] broken for Emoji
  * (bug)[22324b] [string reverse] broken for Emoji
  * (bug)[1dab71,7c64aa] BRE broken by uninitialized value use
  * (bug)[8419c5] Unix tty channels tolerate EINTR
  * ** POTENTIAL INCOMPATIBILITY ***
  * (bug)[4c591f] [string compare] EIAS violation
  * (bug)[266494] [concat foo [list #]] EIAS violation
  * (bug)[24b918] Save IO buffers from modern optimizers
  * (new) support for POSIX error EILSEQ
  * (bug)[688fcc] segfault during traced delete of alias
  * (bug)[ccc448] segfault in ensemble rewrite machinery
  * (new) Update to Unicode-14
  * (bug)[a8579d] failed proc argument spec processing
  * Obsoletes tcl-aa4a13c15516da45.patch
- Bump %itclver and ensure it stays in sync.</changelog>
  <changelog author="max@suse.com" date="1648555200">- Remove the SQLite extension and package it as a subpackage of
  sqlite3 to have only a single copy and keep it more up to date
  (bsc#1195773).
- Clean up the lib dependencies in tclConfig.sh and tcl.pc.</changelog>
  <changelog author="max@suse.com" date="1663848000">- Fix a race condition in test socket-13.1
  (tcl-test-socket-13.1.patch).</changelog>
  <changelog author="max@suse.com" date="1673956800">- [bsc#1206623], tcl-string-compare.patch:
  Fix [string compare -length] on big endian and improve
  [string equal] on little endian.</changelog>
</package>
<package pkgid="312e9a0ebd28cc0d3a4c11c688575182d8392962734c6c88a991e20c4853efb1" name="tcl" arch="src">
  <version epoch="0" ver="8.6.12" rel="150300.14.9.1"/>
  <changelog author="max@suse.com" date="1506340800">- Whitelist known-failing tests. Further investigation needed.</changelog>
  <changelog author="max@suse.com" date="1508414400">- Sync SLE12 with Factory to fix a bug in Itcl that was affecting
  iwidgets (bsc#903017).</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1513252800">- Add more tests in Whitelist as bypass boo#1072657
  identified following tests failed on PowerPC
  interp-34.9 interp-34.13 http-3.25 timer-2.1 thread-20.9</changelog>
  <changelog author="mls@suse.de" date="1513252801">- adapt check section for rpm-4.14.0</changelog>
  <changelog author="max@suse.com" date="1514548800">- Version 8.6.8:
  * [array names -regexp] supports backrefs
  * Fix gcc build failures due to #pragma placement
  * (bug)[b50fb2] exec redir append stdout and stderr to file
  * (bug)[2a9465] http state 100 continue handling broken
  * (bug)[0e4d88] replace command, delete trace kills namespace
  * (bug)[1a5655] [info * methods] includes mixins
  * (bug)[fc1409] segfault in method cloning, oo-15.15
  * (bug)[3298012] Stop crash when hash tables overflow 32 bits
  * (bug)[5d6de6] Close failing case of [package prefer stable]
  * (bug)[4f6a1e] Crash when ensemble map and list are same
  * (bug)[ce3a21] file normalize failure when tail is empty
  * (new)[TIP 477] nmake build system reform
  * (bug)[586e71] EvalObjv exception handling at level #0</changelog>
  <changelog author="ro@suse.de" date="1521115200">- handle s390 like s390x (bnc#1085480)</changelog>
  <changelog author="max@suse.com" date="1544616000">- New version: 8.6.9:
  * NR-enable [package require]
  * (bug)[9fd5c6] crash in object deletion, test oo-11.5
  * (bug)[3c32a3] crash deleting object with class mixed in
  * (platform) stop using -lieee, removed from glibc-2.27
    (bsc#1179615, bsc#1181840).
  * (bug)[8e6a9a] bad binary [string match], test string-11.55
  * (bug)[1873ea] repair multi-thread std channel init
  * (bug)[db36fa] broken bytecode for index values
  * (bug) broken compiled [string replace], test string-14.19
  * (bug) [string trim*] engine crashed on invalid UTF
  * (bug) missing trace in compiled [array set], test var-20.11
  * (bug)[46a241] crash in unset array with search, var-13.[23]
  * (bug)[27b682] race made [file delete] raise "no such file"
  * (bug)[925643] 32/64 cleanup of filesystem DIR operations
  * (bug) leaks in TclSetEnv and env cache
  * (bug)[3592747] [yieldto] dying namespace, tailcall-14.1
  * (bug)[270f78] race in [file mkdir]
  * (bug)[3f7af0] [file delete] raised "permission denied"
  * (bug)[d051b7] overflow crash in [format]
  * revised quoting of [exec] args in generated command line
  * HTTP Keep-Alive with pipelined requests
  * (new)[TIP 505] [lreplace] accepts all out of range indices
  * (bug) Prevent crash from NULL keyName in the registry package
  * Update tcltest package for Travis support
  * (bug)[35a8f1] overlong string length of some lists
  * (bug)[00d04c] Repair [binary encode base64]</changelog>
  <changelog author="max@suse.com" date="1547726400">- Fix a regression in the handling of denormalized empty lists
  (tcl-expand-regression.patch, tcl#cc1e91552c).</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Use FAT LTO objects in order to provide proper static
  library (boo#1138797).</changelog>
  <changelog author="schwab@suse.de" date="1562673600">- binary-40.3 is expected to fail on riscv64 which does not support NaN
  propagation</changelog>
  <changelog author="max@suse.com" date="1575374400">- New version: 8.6.10:
  * (bug)[7a9dc5] [file normalize ~/~foo] segfault
  * (bug)[3cf3a9] variable 'timezone' deprecated in vc2017
  * (bug)[cc1e91] [list [list {*}[set a " "]]] regression
    obsoletes tcl-expand-regression.patch.
  * (bug)[e3f481] tests var-1.2[01]
  * (new) Update to Unicode 12.0
  * (new)[TIP 527] New command [timerate]
  * (bug)[39fed4] [package require] memory validity
  * (new) New command tcl::unsupported::corotype
  * (bug) memlink when namespace deletion kills linked var
  * (new) README file converted to README.md in Markdown
  * (bug)[8b9854] [info level 0] regression with ensembles
  * (bug)[6bdadf] crash multi-arg write-traced [lappend]
  * (bug)[f8a33c] crash Tcl_Exit before init
  * (bug)[fa6bf3] Bytecode fails epoch recovery at numLevel=0
  * (bug)[fec0c1] C stack overflow compiling bytecode
  * tzdata updated to Olson's tzdata2019c
  * (bug)[16768d] Fix [info hostname] on NetBSD
  * (new) libtommath updated to release 1.2.0
  * (bug)[bcd100] bad fs cache when system encoding changes
  * (bug)[135804] segfault in [next] after destroy
  * (bug)[13657a] application/json us text, not binary</changelog>
  <changelog author="dimstar@opensuse.org" date="1602244800">- Fix build with RPM 4.16: error: bare words are no longer
  supported, please use "...":  lib64 == lib64.</changelog>
  <changelog author="max@suse.com" date="1605873600">- Add a manpage symlink for tclsh8.6.</changelog>
  <changelog author="max@suse.com" date="1609761600">- New version: 8.6.11:
  * Add tcltest::(Setup|Eval|Cleanup|)Test
  * Update to Unicode-13
  * Add 3 libtommath functions to stub table
  * Many more bug fixes
- Potentially incompatible changes:
  * (bug)[ffeb20] [binary decode base64] ignore invalid chars
  * (bug)[b8e82d] some -maxlen values break uuencode round trip
  * (bug)[085913] Tcl_DStringAppendElement # quoting precision
  * (bug)[81242a] revised documentation for Tcl_UtfAtIndex()
  * (bug)[ed2980] Tcl_UtfToUniChar reads &gt; TCL_UTF_MAX bytes
  * (bug)[a1bd37] [clock scan] new ISO format (clock-34.(19-24))
  * (bug)[501974] [clock scan] +time zone (clock-34.(53-68))
  * (new) force -eofchar \032 when evaluating library scripts
  * (new)[48898a] improve error message consistency
  * (new) revised case of module names</changelog>
  <changelog author="max@suse.com" date="1610625600">- tclConfig.sh: Fix path names and avoid braces in TCL_PACKAGE_PATH
- Set TCL_LIBRARY at configure time for better consistency.</changelog>
  <changelog author="max@suse.com" date="1620216000">- bsc#1185662: Move tcl.macros /usr/lib/rpm/macros.d .
- https://core.tcl-lang.org/thread/tktview?name=98ae20f0f5:
  Add tcl-aa4a13c15516da45.patch to disable lto for the stubs
  libraries.</changelog>
  <changelog author="max@suse.com" date="1636459200">- New version 8.6.12:
  * (bug)[d43f96] [string trim*] broken for Emoji
  * (bug)[22324b] [string reverse] broken for Emoji
  * (bug)[1dab71,7c64aa] BRE broken by uninitialized value use
  * (bug)[8419c5] Unix tty channels tolerate EINTR
  * ** POTENTIAL INCOMPATIBILITY ***
  * (bug)[4c591f] [string compare] EIAS violation
  * (bug)[266494] [concat foo [list #]] EIAS violation
  * (bug)[24b918] Save IO buffers from modern optimizers
  * (new) support for POSIX error EILSEQ
  * (bug)[688fcc] segfault during traced delete of alias
  * (bug)[ccc448] segfault in ensemble rewrite machinery
  * (new) Update to Unicode-14
  * (bug)[a8579d] failed proc argument spec processing
  * Obsoletes tcl-aa4a13c15516da45.patch
- Bump %itclver and ensure it stays in sync.</changelog>
  <changelog author="max@suse.com" date="1648555200">- Remove the SQLite extension and package it as a subpackage of
  sqlite3 to have only a single copy and keep it more up to date
  (bsc#1195773).
- Clean up the lib dependencies in tclConfig.sh and tcl.pc.</changelog>
  <changelog author="max@suse.com" date="1663848000">- Fix a race condition in test socket-13.1
  (tcl-test-socket-13.1.patch).</changelog>
  <changelog author="max@suse.com" date="1673956800">- [bsc#1206623], tcl-string-compare.patch:
  Fix [string compare -length] on big endian and improve
  [string equal] on little endian.</changelog>
</package>
<package pkgid="0c95818637f7c4f636b1af9cedb0880b3ab544306f124f6433c3f2be8385ce15" name="tcl" arch="x86_64">
  <version epoch="0" ver="8.6.12" rel="150300.14.9.1"/>
  <changelog author="max@suse.com" date="1506340800">- Whitelist known-failing tests. Further investigation needed.</changelog>
  <changelog author="max@suse.com" date="1508414400">- Sync SLE12 with Factory to fix a bug in Itcl that was affecting
  iwidgets (bsc#903017).</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1513252800">- Add more tests in Whitelist as bypass boo#1072657
  identified following tests failed on PowerPC
  interp-34.9 interp-34.13 http-3.25 timer-2.1 thread-20.9</changelog>
  <changelog author="mls@suse.de" date="1513252801">- adapt check section for rpm-4.14.0</changelog>
  <changelog author="max@suse.com" date="1514548800">- Version 8.6.8:
  * [array names -regexp] supports backrefs
  * Fix gcc build failures due to #pragma placement
  * (bug)[b50fb2] exec redir append stdout and stderr to file
  * (bug)[2a9465] http state 100 continue handling broken
  * (bug)[0e4d88] replace command, delete trace kills namespace
  * (bug)[1a5655] [info * methods] includes mixins
  * (bug)[fc1409] segfault in method cloning, oo-15.15
  * (bug)[3298012] Stop crash when hash tables overflow 32 bits
  * (bug)[5d6de6] Close failing case of [package prefer stable]
  * (bug)[4f6a1e] Crash when ensemble map and list are same
  * (bug)[ce3a21] file normalize failure when tail is empty
  * (new)[TIP 477] nmake build system reform
  * (bug)[586e71] EvalObjv exception handling at level #0</changelog>
  <changelog author="ro@suse.de" date="1521115200">- handle s390 like s390x (bnc#1085480)</changelog>
  <changelog author="max@suse.com" date="1544616000">- New version: 8.6.9:
  * NR-enable [package require]
  * (bug)[9fd5c6] crash in object deletion, test oo-11.5
  * (bug)[3c32a3] crash deleting object with class mixed in
  * (platform) stop using -lieee, removed from glibc-2.27
    (bsc#1179615, bsc#1181840).
  * (bug)[8e6a9a] bad binary [string match], test string-11.55
  * (bug)[1873ea] repair multi-thread std channel init
  * (bug)[db36fa] broken bytecode for index values
  * (bug) broken compiled [string replace], test string-14.19
  * (bug) [string trim*] engine crashed on invalid UTF
  * (bug) missing trace in compiled [array set], test var-20.11
  * (bug)[46a241] crash in unset array with search, var-13.[23]
  * (bug)[27b682] race made [file delete] raise "no such file"
  * (bug)[925643] 32/64 cleanup of filesystem DIR operations
  * (bug) leaks in TclSetEnv and env cache
  * (bug)[3592747] [yieldto] dying namespace, tailcall-14.1
  * (bug)[270f78] race in [file mkdir]
  * (bug)[3f7af0] [file delete] raised "permission denied"
  * (bug)[d051b7] overflow crash in [format]
  * revised quoting of [exec] args in generated command line
  * HTTP Keep-Alive with pipelined requests
  * (new)[TIP 505] [lreplace] accepts all out of range indices
  * (bug) Prevent crash from NULL keyName in the registry package
  * Update tcltest package for Travis support
  * (bug)[35a8f1] overlong string length of some lists
  * (bug)[00d04c] Repair [binary encode base64]</changelog>
  <changelog author="max@suse.com" date="1547726400">- Fix a regression in the handling of denormalized empty lists
  (tcl-expand-regression.patch, tcl#cc1e91552c).</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Use FAT LTO objects in order to provide proper static
  library (boo#1138797).</changelog>
  <changelog author="schwab@suse.de" date="1562673600">- binary-40.3 is expected to fail on riscv64 which does not support NaN
  propagation</changelog>
  <changelog author="max@suse.com" date="1575374400">- New version: 8.6.10:
  * (bug)[7a9dc5] [file normalize ~/~foo] segfault
  * (bug)[3cf3a9] variable 'timezone' deprecated in vc2017
  * (bug)[cc1e91] [list [list {*}[set a " "]]] regression
    obsoletes tcl-expand-regression.patch.
  * (bug)[e3f481] tests var-1.2[01]
  * (new) Update to Unicode 12.0
  * (new)[TIP 527] New command [timerate]
  * (bug)[39fed4] [package require] memory validity
  * (new) New command tcl::unsupported::corotype
  * (bug) memlink when namespace deletion kills linked var
  * (new) README file converted to README.md in Markdown
  * (bug)[8b9854] [info level 0] regression with ensembles
  * (bug)[6bdadf] crash multi-arg write-traced [lappend]
  * (bug)[f8a33c] crash Tcl_Exit before init
  * (bug)[fa6bf3] Bytecode fails epoch recovery at numLevel=0
  * (bug)[fec0c1] C stack overflow compiling bytecode
  * tzdata updated to Olson's tzdata2019c
  * (bug)[16768d] Fix [info hostname] on NetBSD
  * (new) libtommath updated to release 1.2.0
  * (bug)[bcd100] bad fs cache when system encoding changes
  * (bug)[135804] segfault in [next] after destroy
  * (bug)[13657a] application/json us text, not binary</changelog>
  <changelog author="dimstar@opensuse.org" date="1602244800">- Fix build with RPM 4.16: error: bare words are no longer
  supported, please use "...":  lib64 == lib64.</changelog>
  <changelog author="max@suse.com" date="1605873600">- Add a manpage symlink for tclsh8.6.</changelog>
  <changelog author="max@suse.com" date="1609761600">- New version: 8.6.11:
  * Add tcltest::(Setup|Eval|Cleanup|)Test
  * Update to Unicode-13
  * Add 3 libtommath functions to stub table
  * Many more bug fixes
- Potentially incompatible changes:
  * (bug)[ffeb20] [binary decode base64] ignore invalid chars
  * (bug)[b8e82d] some -maxlen values break uuencode round trip
  * (bug)[085913] Tcl_DStringAppendElement # quoting precision
  * (bug)[81242a] revised documentation for Tcl_UtfAtIndex()
  * (bug)[ed2980] Tcl_UtfToUniChar reads &gt; TCL_UTF_MAX bytes
  * (bug)[a1bd37] [clock scan] new ISO format (clock-34.(19-24))
  * (bug)[501974] [clock scan] +time zone (clock-34.(53-68))
  * (new) force -eofchar \032 when evaluating library scripts
  * (new)[48898a] improve error message consistency
  * (new) revised case of module names</changelog>
  <changelog author="max@suse.com" date="1610625600">- tclConfig.sh: Fix path names and avoid braces in TCL_PACKAGE_PATH
- Set TCL_LIBRARY at configure time for better consistency.</changelog>
  <changelog author="max@suse.com" date="1620216000">- bsc#1185662: Move tcl.macros /usr/lib/rpm/macros.d .
- https://core.tcl-lang.org/thread/tktview?name=98ae20f0f5:
  Add tcl-aa4a13c15516da45.patch to disable lto for the stubs
  libraries.</changelog>
  <changelog author="max@suse.com" date="1636459200">- New version 8.6.12:
  * (bug)[d43f96] [string trim*] broken for Emoji
  * (bug)[22324b] [string reverse] broken for Emoji
  * (bug)[1dab71,7c64aa] BRE broken by uninitialized value use
  * (bug)[8419c5] Unix tty channels tolerate EINTR
  * ** POTENTIAL INCOMPATIBILITY ***
  * (bug)[4c591f] [string compare] EIAS violation
  * (bug)[266494] [concat foo [list #]] EIAS violation
  * (bug)[24b918] Save IO buffers from modern optimizers
  * (new) support for POSIX error EILSEQ
  * (bug)[688fcc] segfault during traced delete of alias
  * (bug)[ccc448] segfault in ensemble rewrite machinery
  * (new) Update to Unicode-14
  * (bug)[a8579d] failed proc argument spec processing
  * Obsoletes tcl-aa4a13c15516da45.patch
- Bump %itclver and ensure it stays in sync.</changelog>
  <changelog author="max@suse.com" date="1648555200">- Remove the SQLite extension and package it as a subpackage of
  sqlite3 to have only a single copy and keep it more up to date
  (bsc#1195773).
- Clean up the lib dependencies in tclConfig.sh and tcl.pc.</changelog>
  <changelog author="max@suse.com" date="1663848000">- Fix a race condition in test socket-13.1
  (tcl-test-socket-13.1.patch).</changelog>
  <changelog author="max@suse.com" date="1673956800">- [bsc#1206623], tcl-string-compare.patch:
  Fix [string compare -length] on big endian and improve
  [string equal] on little endian.</changelog>
</package>
<package pkgid="f9ce6af08aa3942ca38aba78ed6252e5ee73ec6682b960e216a2e4e7f865c65c" name="terminfo" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="19beb42405a2598c24b429bcd9d218c1f3af2b593535e4c91098c50014090340" name="terminfo" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="c957c8b7723e90b7e65a6f2f254705f2ff895eb44c454d6ff406ce18209634ad" name="terminfo" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="44a0c972003530bb7d070ad96766a614b7fd79426f94b3207481dd816df39c4d" name="terminfo-base" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="438c719edc79109b1aecf9a52d0b760ad603dfcecea15073730aa81fb193ea5b" name="terminfo-base" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="07c695a9630986c4210bc760a30849b56c08a88575cd220f88b4c836999c941b" name="terminfo-base" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="dfedf276ba911130a19e139a023317497b2e9c4724ee29f1ef7889e70964b000" name="tiff" arch="src">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="3d6e670e6a35240a842c2be0434fdeefe12945524a65da16081c20389b07f599" name="typelib-1_0-AppIndicator3-0_1" arch="aarch64">
  <version epoch="0" ver="12.10.1+bzr20170215" rel="150200.3.3.1"/>
  <changelog author="schwab@suse.de" date="1425556800">- Allow building without mono support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.1+bzr20141110:
  * scroll-event: change parameter to the right type.
- Rebase 0001_Fix_mono_dir.patch.
- Remove no-deprecated.patch: merged upstream.
- Remove dont-build-examples.patch: fixed upstream.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1465819200">- Little spec cleanup.</changelog>
  <changelog author="t.gruner@katodev.de" date="1467892800">- Allow building with mono support in case without mono is set</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492603200">- Update to version 12.10.1+bzr20170215 (changes since
  12.10.1+bzr20141110):
  * Handle watcher service appearing and disappearing.
  * Make test-simple-app really working.
  * Fix icon and theme paths when running in $SNAP environment
    (lp#1600136).
  * Do not emit label changes when guide is still empty.
  * Do not append the snap prefix if the icon is saved in a well
    known readable path.
- Add libappindicator-activate-support.patch: Open menu on the
  left-click action (lp#1403449).
- Rename python-appindicator to python2-appindicator.</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Rename %soname to %sover to better reflect its purpose.
- Update summaries.
- Remove redundant pkgconfig() reqiures; these are already
  autodiscovered.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Disable building of -doc subpackage (source not compatible with
  gtk-doc 1.26 - and the doc is available online anyway):
  + Remove gtk-doc BuildRequires.
  + Replace --enable-gtk-doc configure parameter with
  - -disable-gtk-doc,
  + Drop the -doc subpackage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Add libappindicator-no-Werror.patch: the libappindicator code is
  aging and is not keeping up well with the moving world around it.</changelog>
  <changelog author="ximi.obs@gmail.com" date="1547294400">- Changed the activate-support patch to signal an "activate-event"
  so users can create callbacks themselves.
  Original patch from Yichao Yu &lt;yyc1992@gmail.com&gt;.</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557921600">- Drop libappindicator-activate-support.patch as it's no longer needed and
  breaks context menu / actions in fall-back mode (boo#1132659)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Split gtk2 and gtk3 builds using _multibuild. Python2 and Mono
  bindings are only available for GTK2, so the GTK3 version has
  significantly less build dependencies,
  add only_require_python_for_gtk2.patch
- Drop dependency on deprecated gnome-common, see
  https://wiki.gnome.org/Projects/GnomeCommon/Migration
- Allow configure run to succeed even when gtk-doc is not installed,
  add make_gtk_doc_optional.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569931200">- Make sure the OBS spec file parser does not apply the gtk3 psuffix
  for the default ("") multibuild flavor.</changelog>
  <changelog author="mailaender@opensuse.org" date="1580644800">- Use the vanilla nunit for compatibility with newer Mono</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1581508800">- Added xappstatusicon.patch. It adds support for XAppStatus Icon by
  Linux Mint.</changelog>
  <changelog author="tchvatal@suse.com" date="1584964800">- Fix build on py2 less system</changelog>
  <changelog author="dleuenberger@suse.com" date="1586433600">- Do not apply xappstatusicon.patch: pulls half of Mate into Ring1.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add -fcommon in order to fix boo#1164492.</changelog>
  <changelog author="yfjiang@suse.com" date="1673611200">- Provide RH/Fedora used libappindicator-gtk3 symbol required by
  Slack (bsc#1207112).</changelog>
</package>
<package pkgid="c55810e27694eae2d17b88f51ff97a4972eefc24735278565f6cd5d12a722bd5" name="typelib-1_0-AppIndicator3-0_1" arch="s390x">
  <version epoch="0" ver="12.10.1+bzr20170215" rel="150200.3.3.1"/>
  <changelog author="schwab@suse.de" date="1425556800">- Allow building without mono support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.1+bzr20141110:
  * scroll-event: change parameter to the right type.
- Rebase 0001_Fix_mono_dir.patch.
- Remove no-deprecated.patch: merged upstream.
- Remove dont-build-examples.patch: fixed upstream.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1465819200">- Little spec cleanup.</changelog>
  <changelog author="t.gruner@katodev.de" date="1467892800">- Allow building with mono support in case without mono is set</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492603200">- Update to version 12.10.1+bzr20170215 (changes since
  12.10.1+bzr20141110):
  * Handle watcher service appearing and disappearing.
  * Make test-simple-app really working.
  * Fix icon and theme paths when running in $SNAP environment
    (lp#1600136).
  * Do not emit label changes when guide is still empty.
  * Do not append the snap prefix if the icon is saved in a well
    known readable path.
- Add libappindicator-activate-support.patch: Open menu on the
  left-click action (lp#1403449).
- Rename python-appindicator to python2-appindicator.</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Rename %soname to %sover to better reflect its purpose.
- Update summaries.
- Remove redundant pkgconfig() reqiures; these are already
  autodiscovered.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Disable building of -doc subpackage (source not compatible with
  gtk-doc 1.26 - and the doc is available online anyway):
  + Remove gtk-doc BuildRequires.
  + Replace --enable-gtk-doc configure parameter with
  - -disable-gtk-doc,
  + Drop the -doc subpackage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Add libappindicator-no-Werror.patch: the libappindicator code is
  aging and is not keeping up well with the moving world around it.</changelog>
  <changelog author="ximi.obs@gmail.com" date="1547294400">- Changed the activate-support patch to signal an "activate-event"
  so users can create callbacks themselves.
  Original patch from Yichao Yu &lt;yyc1992@gmail.com&gt;.</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557921600">- Drop libappindicator-activate-support.patch as it's no longer needed and
  breaks context menu / actions in fall-back mode (boo#1132659)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Split gtk2 and gtk3 builds using _multibuild. Python2 and Mono
  bindings are only available for GTK2, so the GTK3 version has
  significantly less build dependencies,
  add only_require_python_for_gtk2.patch
- Drop dependency on deprecated gnome-common, see
  https://wiki.gnome.org/Projects/GnomeCommon/Migration
- Allow configure run to succeed even when gtk-doc is not installed,
  add make_gtk_doc_optional.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569931200">- Make sure the OBS spec file parser does not apply the gtk3 psuffix
  for the default ("") multibuild flavor.</changelog>
  <changelog author="mailaender@opensuse.org" date="1580644800">- Use the vanilla nunit for compatibility with newer Mono</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1581508800">- Added xappstatusicon.patch. It adds support for XAppStatus Icon by
  Linux Mint.</changelog>
  <changelog author="tchvatal@suse.com" date="1584964800">- Fix build on py2 less system</changelog>
  <changelog author="dleuenberger@suse.com" date="1586433600">- Do not apply xappstatusicon.patch: pulls half of Mate into Ring1.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add -fcommon in order to fix boo#1164492.</changelog>
  <changelog author="yfjiang@suse.com" date="1673611200">- Provide RH/Fedora used libappindicator-gtk3 symbol required by
  Slack (bsc#1207112).</changelog>
</package>
<package pkgid="41d258e9f298d179b035e8adc4a32dd4eaed647d52fb9c1c869ec17f82f1fe3a" name="typelib-1_0-AppIndicator3-0_1" arch="x86_64">
  <version epoch="0" ver="12.10.1+bzr20170215" rel="150200.3.3.1"/>
  <changelog author="schwab@suse.de" date="1425556800">- Allow building without mono support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.1+bzr20141110:
  * scroll-event: change parameter to the right type.
- Rebase 0001_Fix_mono_dir.patch.
- Remove no-deprecated.patch: merged upstream.
- Remove dont-build-examples.patch: fixed upstream.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1465819200">- Little spec cleanup.</changelog>
  <changelog author="t.gruner@katodev.de" date="1467892800">- Allow building with mono support in case without mono is set</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492603200">- Update to version 12.10.1+bzr20170215 (changes since
  12.10.1+bzr20141110):
  * Handle watcher service appearing and disappearing.
  * Make test-simple-app really working.
  * Fix icon and theme paths when running in $SNAP environment
    (lp#1600136).
  * Do not emit label changes when guide is still empty.
  * Do not append the snap prefix if the icon is saved in a well
    known readable path.
- Add libappindicator-activate-support.patch: Open menu on the
  left-click action (lp#1403449).
- Rename python-appindicator to python2-appindicator.</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Rename %soname to %sover to better reflect its purpose.
- Update summaries.
- Remove redundant pkgconfig() reqiures; these are already
  autodiscovered.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Disable building of -doc subpackage (source not compatible with
  gtk-doc 1.26 - and the doc is available online anyway):
  + Remove gtk-doc BuildRequires.
  + Replace --enable-gtk-doc configure parameter with
  - -disable-gtk-doc,
  + Drop the -doc subpackage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Add libappindicator-no-Werror.patch: the libappindicator code is
  aging and is not keeping up well with the moving world around it.</changelog>
  <changelog author="ximi.obs@gmail.com" date="1547294400">- Changed the activate-support patch to signal an "activate-event"
  so users can create callbacks themselves.
  Original patch from Yichao Yu &lt;yyc1992@gmail.com&gt;.</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557921600">- Drop libappindicator-activate-support.patch as it's no longer needed and
  breaks context menu / actions in fall-back mode (boo#1132659)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Split gtk2 and gtk3 builds using _multibuild. Python2 and Mono
  bindings are only available for GTK2, so the GTK3 version has
  significantly less build dependencies,
  add only_require_python_for_gtk2.patch
- Drop dependency on deprecated gnome-common, see
  https://wiki.gnome.org/Projects/GnomeCommon/Migration
- Allow configure run to succeed even when gtk-doc is not installed,
  add make_gtk_doc_optional.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569931200">- Make sure the OBS spec file parser does not apply the gtk3 psuffix
  for the default ("") multibuild flavor.</changelog>
  <changelog author="mailaender@opensuse.org" date="1580644800">- Use the vanilla nunit for compatibility with newer Mono</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1581508800">- Added xappstatusicon.patch. It adds support for XAppStatus Icon by
  Linux Mint.</changelog>
  <changelog author="tchvatal@suse.com" date="1584964800">- Fix build on py2 less system</changelog>
  <changelog author="dleuenberger@suse.com" date="1586433600">- Do not apply xappstatusicon.patch: pulls half of Mate into Ring1.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add -fcommon in order to fix boo#1164492.</changelog>
  <changelog author="yfjiang@suse.com" date="1673611200">- Provide RH/Fedora used libappindicator-gtk3 symbol required by
  Slack (bsc#1207112).</changelog>
</package>
<package pkgid="0583407e1bb0d46c9cc3949db0480ed5ea39297e67a7d8c561dd93c4be6b4afe" name="typelib-1_0-NM-1_0" arch="aarch64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="501f10de1f79f8b58764ce1ef5871338a304eac01cc2e234c4dff1b12b56ac28" name="typelib-1_0-NM-1_0" arch="s390x">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="be74b9c5d4481f0445dfeffd837e1747fc1adb91094580848cadf852d3671d40" name="typelib-1_0-NM-1_0" arch="x86_64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="cb7247fa23e68da18a920158418710919f03546ca1f40c4a6a2abb859342564f" name="ucode-amd" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="c8ea3c837d33fdf847f32a4f74a6b165dc7843f937b05dd89ba1f84ff90d87c4" name="ucode-intel" arch="src">
  <version epoch="0" ver="20230512" rel="150200.24.1"/>
  <changelog author="meissner@suse.com" date="1573041600">- Updated to 20191112 security release (bsc#1155988)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- new platforms ----------------------------------------
  - CML-U62      A0       6-a6-0/80           000000c6 Core Gen10 Mobile
  - CNL-U        D0       6-66-3/80           0000002a Core Gen8 Mobile
  - SKX-SP       B1       6-55-3/97           01000150 Xeon Scalable
  - ICL U/Y      D1       6-7e-5/80           00000046 Core Gen10 Mobile
  - ---- updated platforms ------------------------------------
  - SKL U/Y      D0       6-4e-3/c0 000000cc-&gt;000000d4 Core Gen6 Mobile
  - SKL H/S/E3   R0/N0    6-5e-3/36 000000cc-&gt;000000d4 Core Gen6
  - AML-Y22      H0       6-8e-9/10 000000b4-&gt;000000c6 Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000b4-&gt;000000c6 Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000b4-&gt;000000c6 Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000b8-&gt;000000c6 Core Gen8 Mobile
  - AML-Y        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - CML-U42      V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen8 Mobile
  - KBL-G/X      H0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7/Gen8
  - KBL-H/S/E3   B0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7; Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000b4-&gt;000000c6 Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000b4-&gt;000000c6 Core Gen8
  - CFL-H        R0       6-9e-d/22 000000b8-&gt;000000c6 Core Gen9 Mobile
- Includes security fixes for:
  - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
  - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)</changelog>
  <changelog author="meissner@suse.com" date="1573646400">- Updated to 20191112 official security release (bsc#1155988)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- new platforms ----------------------------------------
  - AVN          B0/C0    6-4d-8/01           0000012d Atom C2xxx
  - CNL-U        D0       6-66-3/80           0000002a Core Gen8 Mobile
  - SKX-SP       B1       6-55-3/97           01000151 Xeon Scalable
  - CLX-SP       B0       6-55-6/bf           0400002c Xeon Scalable Gen2
  - GLK-R        R0       6-7a-8/01           00000016 Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  - ICL-U/Y      D1       6-7e-5/80           00000046 Core Gen10 Mobile
  - CML-U62      A0       6-a6-0/80           000000c6 Core Gen10 Mobile
  - ---- updated platforms ------------------------------------
  - SKL-U/Y      D0       6-4e-3/c0 000000cc-&gt;000000d4 Core Gen6 Mobile
  - SKX-SP       H0/M0/U0 6-55-4/b7 02000064-&gt;02000065 Xeon Scalable
  - SKX-D        M1       6-55-4/b7 02000064-&gt;02000065 Xeon D-21xx
  - CLX-SP       B1       6-55-7/bf 0500002b-&gt;0500002c Xeon Scalable Gen2
  - SKL-H/S/E3   R0/N0    6-5e-3/36 000000cc-&gt;000000d4 Core Gen6
  - GLK          B0       6-7a-1/01 0000002e-&gt;00000032 Pentium J5005/N5000, Celeron J4005/J4105/N4000/N4100
  - AML-Y22      H0       6-8e-9/10 000000b4-&gt;000000c6 Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000b4-&gt;000000c6 Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000b4-&gt;000000c6 Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000b8-&gt;000000c6 Core Gen8 Mobile
  - AML-Y        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - CML-U42      V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen8 Mobile
  - KBL-G/X      H0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7/Gen8
  - KBL-H/S/E3   B0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7; Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000b4-&gt;000000c6 Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000b4-&gt;000000c6 Core Gen8
  - CFL-H        R0       6-9e-d/22 000000b8-&gt;000000c6 Core Gen9 Mobile
  - ---- removed platforms ------------------------------------
  - CFL-H/S      P0       6-9e-c/22 000000a2           Core Gen9
- Includes security fixes for:
  - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
  - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)</changelog>
  <changelog author="meissner@suse.com" date="1574164800">- Updated to 20191115 release (bsc#1157004)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- updated platforms ------------------------------------
  - SKL-U/Y      D0       6-4e-3/c0 000000d4-&gt;000000d6 Core Gen6 Mobile
  - SKL-U23e     K1       6-4e-3/c0 000000d4-&gt;000000d6 Core Gen6 Mobile
  - SKL-H/S/E3   N0/R0/S0 6-5e-3/36 000000d4-&gt;000000d6 Core Gen6
  - AML-Y22      H0       6-8e-9/10 000000c6-&gt;000000ca Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000c6-&gt;000000ca Core Gen7 Mobile
  - KBL-U23e     J1       6-8e-9/c0 000000c6-&gt;000000ca Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000c6-&gt;000000ca Core Gen8 Mobile
  - KBL-R U      Y0       6-8e-a/c0 000000c6-&gt;000000ca Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000c6-&gt;000000ca Core Gen8 Mobile
  - AML-Y42      V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen8 Mobile
  - CML-U42      V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen10 Mobile
  - KBL-G/H/S/X/E3 B0     6-9e-9/2a 000000c6-&gt;000000ca Core Gen7 Desktop, Mobile, Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000c6-&gt;000000ca Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000c6-&gt;000000ca Core Gen8
  - CFL-S        P0       6-9e-c/22 000000c6-&gt;000000ca Core Gen9 Desktop
  - CFL-H/S/E3   R0       6-9e-d/22 000000c6-&gt;000000ca Core Gen9 Desktop, Mobile, Xeon E
  - CML-U62      A0       6-a6-0/80 000000c6-&gt;000000ca Core Gen10 Mobile
- Updated to 20191113 release
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- updated platforms ------------------------------------
  - CFL-S        P0       6-9e-c/22 000000a2-&gt;000000c6 Core Gen9 Desktop</changelog>
  <changelog author="meissner@suse.com" date="1579089600">- reverted the entry below to 02000064 due to occasional faults (bsc#1160478)
  - SKX-SP       H0/M0/U0 6-55-4/b7 02000064-&gt;02000065 Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1587470400">- updated skylake microcode to the current version. (bsc#1169570)
  - 02000064-&gt;02006901</changelog>
  <changelog author="meissner@suse.com" date="1591185600">- Updated Intel CPU Microcode to 20200602 (prerelease) (bsc#1172466)
  Fixes for:
  - CVE-2020-0543: Fixed a side channel attack against special registers
    which could have resulted in leaking of read values to cores other
    than the one which called it.  This attack is known as Special Register
    Buffer Data Sampling (SRBDS) or "CrossTalk" (bsc#1154824).
  - CVE-2020-0548,CVE-2020-0549: Additional ucode updates were supplied to
    mitigate the Vector Register and L1D Eviction Sampling aka "CacheOutAttack"
    attacks. (bsc#1156353)
  == 20200602_DEMO Release ==
  - - Updates upon 20200520 release --
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  HSW          C0       6-3c-3/32 00000027-&gt;00000028 Core Gen4
  BDW-U/Y      E0/F0    6-3d-4/c0 0000002e-&gt;0000002f Core Gen5
  HSW-U        C0/D0    6-45-1/72 00000025-&gt;00000026 Core Gen4
  HSW-H        C0       6-46-1/32 0000001b-&gt;0000001c Core Gen4
  BDW-H/E3     E0/G0    6-47-1/22 00000021-&gt;00000022 Core Gen5
  SKL-U/Y      D0       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKL-U23e     K1       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKX-SP       B1       6-55-3/97 01000151-&gt;01000157 Xeon Scalable
  SKX-SP       H0/M0/U0 6-55-4/b7 02000065-&gt;02006906 Xeon Scalable
  SKX-D        M1       6-55-4/b7 02000065-&gt;02006906 Xeon D-21xx
  CLX-SP       B0       6-55-6/bf 0400002c-&gt;04002f01 Xeon Scalable Gen2
  CLX-SP       B1       6-55-7/bf 0500002c-&gt;04002f01 Xeon Scalable Gen2
  SKL-H/S      R0/N0    6-5e-3/36 000000d6-&gt;000000dc Core Gen6; Xeon E3 v5
  AML-Y22      H0       6-8e-9/10 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-U/Y      H0       6-8e-9/c0 000000ca-&gt;000000d6 Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 000000ca-&gt;000000d6 Core Gen8 Mobile
  WHL-U        W0       6-8e-b/d0 000000ca-&gt;000000d6 Core Gen8 Mobile
  AML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  CML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  WHL-U        V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-G/H/S/E3 B0       6-9e-9/2a 000000ca-&gt;000000d6 Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 000000ca-&gt;000000d6 Core Gen8 Desktop, Mobile, Xeon E
  CFL-S        B0       6-9e-b/02 000000ca-&gt;000000d6 Core Gen8
  CFL-H/S      P0       6-9e-c/22 000000ca-&gt;000000d6 Core Gen9
  CFL-H        R0       6-9e-d/22 000000ca-&gt;000000d6 Core Gen9 Mobile
- Updated Intel CPU Microcode to 20200520
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061f-&gt;00000621 Xeon E3/E5, Core X
  SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000718-&gt;0000071a Xeon E3/E5, Core X</changelog>
  <changelog author="meissner@suse.com" date="1592222400">- Updated Intel CPU Microcode to 20200609 official release (bsc#1172466)
  - no changes to 20200602 prerelease</changelog>
  <changelog author="meissner@suse.com" date="1592395200">- Updated Intel CPU Microcode to 20200616 official release (bsc#1172856)
  - revert 06-4e-03 Skylake U/Y, U23e ucode back to 000000d6 release
  - revert 06-5e-03 Skylake H/S ucode back to 000000d6 release,
    as both cause stability issues.  (bsc#1172856)</changelog>
  <changelog author="meissner@suse.com" date="1604491200">- Updated Intel CPU Microcode to 20201027 prerelease (bsc#1170446)
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)
  [#] New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#] Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605096000">- Updated Intel CPU Microcode to 20201110 official release.
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)
  - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)
  - CVE-2020-8696: Vector Register Sampling Active INTEL-SA-00381 (bsc#1173592)
- Releasenotes:
  - Security updates for [INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html).
  - Security updates for [INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html).
  - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
  - Update for functional issues. Refer to [8th and 9th Gen Intel® Core™ Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
  - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel® Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [6th Gen Intel® Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
  [#]## New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | LKF            | B2/B3    | 06-8a-01/10 |          | 00000028 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605787200">- Updated Intel CPU Microcode to 20201118 official release. (bsc#1178971)
  - Removed TGL/06-8c-01/80 due to functional issues with some OEM platforms.</changelog>
  <changelog author="meissner@suse.com" date="1607342400">- Reverted 3 microcodes back to 20200616 release level after regression reports. (bsc#1179224)
  - SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | Xeon Scalable
  - SKX-D          | M1       | 06-55-04/b7 | 02006906 | Xeon D-21xx
  - CLX-SP         | B0       | 06-55-06/bf | 04002f01 | Xeon Scalable Gen2
  - CLX-SP         | B1       | 06-55-07/bf | 05002f01 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1613563200">- Updated Intel CPU Microcode to 20210216 official release. (bsc#1178971 bsc#1179224)
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003003 | 04003006 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003003 | 05003006 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1623153600">- Updated to Intel CPU Microcode 20210525 release.
  - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)
    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
  - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
- Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details.
- Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
- Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
- Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-d-1500-specification-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
- Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
- Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
- Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
- Update for functional issues. Refer to [6th Gen Intel Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
- Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
- New platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CLX-SP         | A0       | 06-55-05/b7 |          | 03000010 | Xeon Scalable Gen2
  | ICX-SP         | C0       | 06-6a-05/87 |          | 0c0002f0 | Xeon Scalable Gen3
  | ICX-SP         | D0       | 06-6a-06/87 |          | 0d0002a0 | Xeon Scalable Gen3
  | SNR            | B0       | 06-86-04/01 |          | 0b00000f | Atom P59xxB
  | SNR            | B1       | 06-86-05/01 |          | 0b00000f | Atom P59xxB
  | TGL            | B1       | 06-8c-01/80 |          | 00000088 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 |          | 00000016 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 |          | 0000002c | Core Gen11 Mobile
  | EHL            | B1       | 06-96-01/01 |          | 00000011 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 |          | 0000001d | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | RKL-S          | B0       | 06-a7-01/02 |          | 00000040 | Core Gen11
- Updated platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3
  | HSX-EX         | E0       | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | BDX-ML         | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3
  | BDX-DE         | V2/V3    | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  | BDX-DE         | Y0       | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87
  | BDX-NS         | A0       | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53
  | APL            | D0       | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series
  | GLK            | B0       | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology
  | AML-Y22        | H0       | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10
  | CML-U62        | A0       | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile
  | CML-U62 V2     | K0       | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1644494400">- Updated to Intel CPU Microcode 20220207 release.
  - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)
  - CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)
  - CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)
  - CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)
  - Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)
  - Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)
  - Update for functional issues. Refer to [Third Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [11th Generation Intel® Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [11th Generation Intel® Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634808) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [10th Generation Intel® Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
  - Update for functional issues. Refer to [8th Generation Intel® Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [8th Gen Intel® Core" Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel® Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [6th Generation Intel® Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/core/desktop-6th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel® Pentium® Silver and Intel® Celeron® Processors](https://www.intel.com/content/www/us/en/products/docs/processors/pentium/silver-celeron-spec-update.html?wapkw=processor+specification+update) for details.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- Updated to Intel CPU Microcode 20220419 release. (bsc#1198717)
  - Update for functional issues. Refer to errata
    APLI-11 in [Intel Atom Processor E3900
    Series](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.
  - Changed Microcodes:
  - | APL            | E0       | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx</changelog>
  <changelog author="meissner@suse.com" date="1652270400">- Updated to Intel CPU Microcode 20220510 release. (bsc#1199423)
  - CVE-2022-21151: Security updates for [INTEL-SA-000617](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.html)
  - Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [Intel Atom C3000 Processor Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/atom/atom-c3000-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [Intel Atom Processor E3900 Specification Update Addendum](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.
  - New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/03 |          | 0000001f | Core Gen12
  | ADL            | C0       | 06-97-05/03 |          | 0000001f | Core Gen12
  | ADL            | L0       | 06-9a-03/80 |          | 0000041c | Core Gen12
  | ADL            | L0       | 06-9a-04/80 |          | 0000041c | Core Gen12
  | ADL            | C0       | 06-bf-02/03 |          | 0000001f | Core Gen12
  | ADL            | C0       | 06-bf-02/03 |          | 0000001f | Core Gen12
  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | VLV            | D0       | 06-37-09/0F | 0000090c | 0000090d | Atom E38xx
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000ec | 000000f0 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 0100015c | 0100015d | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 0400320a | 04003302 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 0500320a | 05003302 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002402 | 07002501 | Xeon Scalable Gen3
  | APL            | D0       | 06-5c-09/03 | 00000046 | 00000048 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000ec | 000000f0 | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 00000036 | 00000038 | Atom C Series
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000331 | 0d000363 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 00000038 | 0000003a | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 0000001c | 0000001e | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a8 | 000000b0 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 0000002d | 00000031 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 | 0000009a | 000000a4 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000022 | 00000026 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003c | 0000003e | Core Gen11 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000ec | 000000f0 | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000ec | 000000f0 | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000ec | 000000f0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000ec | 000000f0 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen8 Mobile
  | EHL            | B1       | 06-96-01/01 | 00000015 | 00000016 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 | 2400001f | 24000023 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000ec | 000000f0 | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000ec | 000000f0 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000ec | 000000f0 | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000ec | 000000f0 | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000ec | 000000f0 | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000ec | 000000f0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000ec | 000000f0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000ee | 000000f0 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000ea | 000000f0 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000ec | 000000f0 | Core Gen10 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000050 | 00000053 | Core Gen11</changelog>
  <changelog author="meissner@suse.com" date="1660132800">- Updated to Intel CPU Microcode 20220809 release. (bsc#1201727)
  - CVE-2022-21233: Security updates for [INTEL-SA-00657](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html).
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification
  +Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | B1       | 06-55-03/97 | 0100015d | 0100015e | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon D-21xx
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000363 | 0d000375 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003a | 0000003c | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 0000001e | 00000020 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b0 | 000000b2 | Core Gen10 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000026 | 00000028 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003e | 00000040 | Core Gen11 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000053 | 00000054 | Core Gen11
  | ADL            | C0       | 06-97-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-97-05/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | C0       | 06-bf-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-bf-05/03 | 0000001f | 00000022 | Core Gen12</changelog>
  <changelog author="meissner@suse.com" date="1676462400">- Updated to Intel CPU Microcode 20230214 release.
  Security issues fixed:
  - CVE-2022-38090: Security updates for [INTEL-SA-00767](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html) (bsc#1208275)
  - CVE-2022-33196: Security updates for [INTEL-SA-00738](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html) (bsc#1208276)
  - CVE-2022-21216: Security updates for [INTEL-SA-00700](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html) (bsc#1208277)
  - CVE-2022-33972: Security updates for [INTEL-SA-00730](http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html) (bsc#1208479)
  New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SPR-SP         | E2       | 06-8f-05/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-HBM        | B3       | 06-8f-08/10 |          | 2c000170 | Xeon Max
  | RPL-P 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-H 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-97-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000424 | 00000429 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000424 | 00000429 | Core Gen12
  | CLX-SP         | B0       | 06-55-06/bf | 04003302 | 04003303 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003302 | 05003303 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002501 | 07002503 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003c | 0000003e | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 00000020 | 00000022 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-D          | B0       | 06-6c-01/10 | 01000201 | 01000211 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b6 | 000000b8 | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000375 | 0d000389 | Xeon Scalable Gen3
  | JSL            | A0/A1    | 06-9c-00/01 | 24000023 | 24000024 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | LKF            | B2/B3    | 06-8a-01/10 | 00000031 | 00000032 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000056 | 00000057 | Core Gen11
  | RPL-S          | S0       | 06-b7-01/32 | 0000010e | 00000112 | Core Gen13
  | SKX-SP         | B1       | 06-55-03/97 | 0100015e | 01000161 | Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1684238400">- Updated to Intel CPU Microcode 20230512 release. (bsc#1211382)
  - New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/01 |          | 00000010 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  | AZB            | R0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  - Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | L0       | 06-9a-03/80 | 00000429 | 0000042a | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000429 | 0000042a | Core Gen12
  | AML-Y22        | H0       | 06-8e-09/10 |          | 000000f2 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f4 | 000000f8 | Core Gen9 Mobile
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f0 | 000000f2 | Core Gen9
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f0 | 000000f2 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f0 | 000000f2 | Core Gen8
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f0 | 000000f2 | Core Gen8 Mobile
  | CLX-SP         | B0       | 06-55-06/bf | 04003303 | 04003501 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003303 | 05003501 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002503 | 07002601 | Xeon Scalable Gen3
  | ICL-D          | B0       | 06-6c-01/10 | 01000211 | 01000230 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b8 | 000000ba | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000389 | 0d000390 | Xeon Scalable Gen3
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000f0 | 000000f2 | Core Gen7; Xeon E3 v6
  | KBL-U/Y        | H0       | 06-8e-09/c0 |          | 000000f2 | Core Gen7 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000032 | 00000033 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000057 | 00000058 | Core Gen11
  | RPL-H 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-P 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-S          | S0       | 06-b7-01/32 | 00000112 | 00000113 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/07 | 0000410e | 00004112 | Core Gen13
  | SKX-D          | H0       | 06-55-04/b7 |          | 02006f05 | Xeon D-21xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000161 | 01000171 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 |          | 02006f05 | Xeon Scalable
  | SPR-HBM        | B3       | 06-8f-08/10 | 2c000170 | 2c0001d1 | Xeon Max
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S2       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S3       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | TGL            | B1       | 06-8c-01/80 | 000000a6 | 000000aa | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000042 | 00000044 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000028 | 0000002a | Core Gen11 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 |          | 000000f2 | Core Gen8 Mobile</changelog>
</package>
<package pkgid="9739ad7e91070e88a508364cbab7bdaf8b8869a52cf8d5897ccc7c66db3acfc2" name="ucode-intel" arch="x86_64">
  <version epoch="0" ver="20230512" rel="150200.24.1"/>
  <changelog author="meissner@suse.com" date="1573041600">- Updated to 20191112 security release (bsc#1155988)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- new platforms ----------------------------------------
  - CML-U62      A0       6-a6-0/80           000000c6 Core Gen10 Mobile
  - CNL-U        D0       6-66-3/80           0000002a Core Gen8 Mobile
  - SKX-SP       B1       6-55-3/97           01000150 Xeon Scalable
  - ICL U/Y      D1       6-7e-5/80           00000046 Core Gen10 Mobile
  - ---- updated platforms ------------------------------------
  - SKL U/Y      D0       6-4e-3/c0 000000cc-&gt;000000d4 Core Gen6 Mobile
  - SKL H/S/E3   R0/N0    6-5e-3/36 000000cc-&gt;000000d4 Core Gen6
  - AML-Y22      H0       6-8e-9/10 000000b4-&gt;000000c6 Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000b4-&gt;000000c6 Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000b4-&gt;000000c6 Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000b8-&gt;000000c6 Core Gen8 Mobile
  - AML-Y        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - CML-U42      V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen8 Mobile
  - KBL-G/X      H0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7/Gen8
  - KBL-H/S/E3   B0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7; Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000b4-&gt;000000c6 Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000b4-&gt;000000c6 Core Gen8
  - CFL-H        R0       6-9e-d/22 000000b8-&gt;000000c6 Core Gen9 Mobile
- Includes security fixes for:
  - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
  - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)</changelog>
  <changelog author="meissner@suse.com" date="1573646400">- Updated to 20191112 official security release (bsc#1155988)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- new platforms ----------------------------------------
  - AVN          B0/C0    6-4d-8/01           0000012d Atom C2xxx
  - CNL-U        D0       6-66-3/80           0000002a Core Gen8 Mobile
  - SKX-SP       B1       6-55-3/97           01000151 Xeon Scalable
  - CLX-SP       B0       6-55-6/bf           0400002c Xeon Scalable Gen2
  - GLK-R        R0       6-7a-8/01           00000016 Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  - ICL-U/Y      D1       6-7e-5/80           00000046 Core Gen10 Mobile
  - CML-U62      A0       6-a6-0/80           000000c6 Core Gen10 Mobile
  - ---- updated platforms ------------------------------------
  - SKL-U/Y      D0       6-4e-3/c0 000000cc-&gt;000000d4 Core Gen6 Mobile
  - SKX-SP       H0/M0/U0 6-55-4/b7 02000064-&gt;02000065 Xeon Scalable
  - SKX-D        M1       6-55-4/b7 02000064-&gt;02000065 Xeon D-21xx
  - CLX-SP       B1       6-55-7/bf 0500002b-&gt;0500002c Xeon Scalable Gen2
  - SKL-H/S/E3   R0/N0    6-5e-3/36 000000cc-&gt;000000d4 Core Gen6
  - GLK          B0       6-7a-1/01 0000002e-&gt;00000032 Pentium J5005/N5000, Celeron J4005/J4105/N4000/N4100
  - AML-Y22      H0       6-8e-9/10 000000b4-&gt;000000c6 Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000b4-&gt;000000c6 Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000b4-&gt;000000c6 Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000b8-&gt;000000c6 Core Gen8 Mobile
  - AML-Y        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - CML-U42      V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen8 Mobile
  - KBL-G/X      H0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7/Gen8
  - KBL-H/S/E3   B0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7; Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000b4-&gt;000000c6 Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000b4-&gt;000000c6 Core Gen8
  - CFL-H        R0       6-9e-d/22 000000b8-&gt;000000c6 Core Gen9 Mobile
  - ---- removed platforms ------------------------------------
  - CFL-H/S      P0       6-9e-c/22 000000a2           Core Gen9
- Includes security fixes for:
  - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
  - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)</changelog>
  <changelog author="meissner@suse.com" date="1574164800">- Updated to 20191115 release (bsc#1157004)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- updated platforms ------------------------------------
  - SKL-U/Y      D0       6-4e-3/c0 000000d4-&gt;000000d6 Core Gen6 Mobile
  - SKL-U23e     K1       6-4e-3/c0 000000d4-&gt;000000d6 Core Gen6 Mobile
  - SKL-H/S/E3   N0/R0/S0 6-5e-3/36 000000d4-&gt;000000d6 Core Gen6
  - AML-Y22      H0       6-8e-9/10 000000c6-&gt;000000ca Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000c6-&gt;000000ca Core Gen7 Mobile
  - KBL-U23e     J1       6-8e-9/c0 000000c6-&gt;000000ca Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000c6-&gt;000000ca Core Gen8 Mobile
  - KBL-R U      Y0       6-8e-a/c0 000000c6-&gt;000000ca Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000c6-&gt;000000ca Core Gen8 Mobile
  - AML-Y42      V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen8 Mobile
  - CML-U42      V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen10 Mobile
  - KBL-G/H/S/X/E3 B0     6-9e-9/2a 000000c6-&gt;000000ca Core Gen7 Desktop, Mobile, Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000c6-&gt;000000ca Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000c6-&gt;000000ca Core Gen8
  - CFL-S        P0       6-9e-c/22 000000c6-&gt;000000ca Core Gen9 Desktop
  - CFL-H/S/E3   R0       6-9e-d/22 000000c6-&gt;000000ca Core Gen9 Desktop, Mobile, Xeon E
  - CML-U62      A0       6-a6-0/80 000000c6-&gt;000000ca Core Gen10 Mobile
- Updated to 20191113 release
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- updated platforms ------------------------------------
  - CFL-S        P0       6-9e-c/22 000000a2-&gt;000000c6 Core Gen9 Desktop</changelog>
  <changelog author="meissner@suse.com" date="1579089600">- reverted the entry below to 02000064 due to occasional faults (bsc#1160478)
  - SKX-SP       H0/M0/U0 6-55-4/b7 02000064-&gt;02000065 Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1587470400">- updated skylake microcode to the current version. (bsc#1169570)
  - 02000064-&gt;02006901</changelog>
  <changelog author="meissner@suse.com" date="1591185600">- Updated Intel CPU Microcode to 20200602 (prerelease) (bsc#1172466)
  Fixes for:
  - CVE-2020-0543: Fixed a side channel attack against special registers
    which could have resulted in leaking of read values to cores other
    than the one which called it.  This attack is known as Special Register
    Buffer Data Sampling (SRBDS) or "CrossTalk" (bsc#1154824).
  - CVE-2020-0548,CVE-2020-0549: Additional ucode updates were supplied to
    mitigate the Vector Register and L1D Eviction Sampling aka "CacheOutAttack"
    attacks. (bsc#1156353)
  == 20200602_DEMO Release ==
  - - Updates upon 20200520 release --
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  HSW          C0       6-3c-3/32 00000027-&gt;00000028 Core Gen4
  BDW-U/Y      E0/F0    6-3d-4/c0 0000002e-&gt;0000002f Core Gen5
  HSW-U        C0/D0    6-45-1/72 00000025-&gt;00000026 Core Gen4
  HSW-H        C0       6-46-1/32 0000001b-&gt;0000001c Core Gen4
  BDW-H/E3     E0/G0    6-47-1/22 00000021-&gt;00000022 Core Gen5
  SKL-U/Y      D0       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKL-U23e     K1       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKX-SP       B1       6-55-3/97 01000151-&gt;01000157 Xeon Scalable
  SKX-SP       H0/M0/U0 6-55-4/b7 02000065-&gt;02006906 Xeon Scalable
  SKX-D        M1       6-55-4/b7 02000065-&gt;02006906 Xeon D-21xx
  CLX-SP       B0       6-55-6/bf 0400002c-&gt;04002f01 Xeon Scalable Gen2
  CLX-SP       B1       6-55-7/bf 0500002c-&gt;04002f01 Xeon Scalable Gen2
  SKL-H/S      R0/N0    6-5e-3/36 000000d6-&gt;000000dc Core Gen6; Xeon E3 v5
  AML-Y22      H0       6-8e-9/10 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-U/Y      H0       6-8e-9/c0 000000ca-&gt;000000d6 Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 000000ca-&gt;000000d6 Core Gen8 Mobile
  WHL-U        W0       6-8e-b/d0 000000ca-&gt;000000d6 Core Gen8 Mobile
  AML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  CML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  WHL-U        V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-G/H/S/E3 B0       6-9e-9/2a 000000ca-&gt;000000d6 Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 000000ca-&gt;000000d6 Core Gen8 Desktop, Mobile, Xeon E
  CFL-S        B0       6-9e-b/02 000000ca-&gt;000000d6 Core Gen8
  CFL-H/S      P0       6-9e-c/22 000000ca-&gt;000000d6 Core Gen9
  CFL-H        R0       6-9e-d/22 000000ca-&gt;000000d6 Core Gen9 Mobile
- Updated Intel CPU Microcode to 20200520
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061f-&gt;00000621 Xeon E3/E5, Core X
  SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000718-&gt;0000071a Xeon E3/E5, Core X</changelog>
  <changelog author="meissner@suse.com" date="1592222400">- Updated Intel CPU Microcode to 20200609 official release (bsc#1172466)
  - no changes to 20200602 prerelease</changelog>
  <changelog author="meissner@suse.com" date="1592395200">- Updated Intel CPU Microcode to 20200616 official release (bsc#1172856)
  - revert 06-4e-03 Skylake U/Y, U23e ucode back to 000000d6 release
  - revert 06-5e-03 Skylake H/S ucode back to 000000d6 release,
    as both cause stability issues.  (bsc#1172856)</changelog>
  <changelog author="meissner@suse.com" date="1604491200">- Updated Intel CPU Microcode to 20201027 prerelease (bsc#1170446)
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)
  [#] New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#] Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605096000">- Updated Intel CPU Microcode to 20201110 official release.
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)
  - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)
  - CVE-2020-8696: Vector Register Sampling Active INTEL-SA-00381 (bsc#1173592)
- Releasenotes:
  - Security updates for [INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html).
  - Security updates for [INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html).
  - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
  - Update for functional issues. Refer to [8th and 9th Gen Intel® Core™ Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
  - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel® Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [6th Gen Intel® Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel® Xeon® E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
  [#]## New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | LKF            | B2/B3    | 06-8a-01/10 |          | 00000028 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605787200">- Updated Intel CPU Microcode to 20201118 official release. (bsc#1178971)
  - Removed TGL/06-8c-01/80 due to functional issues with some OEM platforms.</changelog>
  <changelog author="meissner@suse.com" date="1607342400">- Reverted 3 microcodes back to 20200616 release level after regression reports. (bsc#1179224)
  - SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | Xeon Scalable
  - SKX-D          | M1       | 06-55-04/b7 | 02006906 | Xeon D-21xx
  - CLX-SP         | B0       | 06-55-06/bf | 04002f01 | Xeon Scalable Gen2
  - CLX-SP         | B1       | 06-55-07/bf | 05002f01 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1613563200">- Updated Intel CPU Microcode to 20210216 official release. (bsc#1178971 bsc#1179224)
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003003 | 04003006 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003003 | 05003006 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1623153600">- Updated to Intel CPU Microcode 20210525 release.
  - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)
    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
  - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
- Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details.
- Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
- Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
- Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-d-1500-specification-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
- Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
- Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
- Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
- Update for functional issues. Refer to [6th Gen Intel Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
- Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
- New platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CLX-SP         | A0       | 06-55-05/b7 |          | 03000010 | Xeon Scalable Gen2
  | ICX-SP         | C0       | 06-6a-05/87 |          | 0c0002f0 | Xeon Scalable Gen3
  | ICX-SP         | D0       | 06-6a-06/87 |          | 0d0002a0 | Xeon Scalable Gen3
  | SNR            | B0       | 06-86-04/01 |          | 0b00000f | Atom P59xxB
  | SNR            | B1       | 06-86-05/01 |          | 0b00000f | Atom P59xxB
  | TGL            | B1       | 06-8c-01/80 |          | 00000088 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 |          | 00000016 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 |          | 0000002c | Core Gen11 Mobile
  | EHL            | B1       | 06-96-01/01 |          | 00000011 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 |          | 0000001d | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | RKL-S          | B0       | 06-a7-01/02 |          | 00000040 | Core Gen11
- Updated platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3
  | HSX-EX         | E0       | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | BDX-ML         | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3
  | BDX-DE         | V2/V3    | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  | BDX-DE         | Y0       | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87
  | BDX-NS         | A0       | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53
  | APL            | D0       | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series
  | GLK            | B0       | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology
  | AML-Y22        | H0       | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10
  | CML-U62        | A0       | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile
  | CML-U62 V2     | K0       | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1644494400">- Updated to Intel CPU Microcode 20220207 release.
  - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)
  - CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)
  - CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)
  - CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)
  - Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)
  - Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)
  - Update for functional issues. Refer to [Third Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [11th Generation Intel® Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [11th Generation Intel® Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634808) for details.
  - Update for functional issues. Refer to [10th Gen Intel® Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [10th Generation Intel® Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
  - Update for functional issues. Refer to [8th Generation Intel® Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [8th Gen Intel® Core" Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel® Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [6th Generation Intel® Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/core/desktop-6th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel® Pentium® Silver and Intel® Celeron® Processors](https://www.intel.com/content/www/us/en/products/docs/processors/pentium/silver-celeron-spec-update.html?wapkw=processor+specification+update) for details.</changelog>
  <changelog author="meissner@suse.com" date="1650542400">- Updated to Intel CPU Microcode 20220419 release. (bsc#1198717)
  - Update for functional issues. Refer to errata
    APLI-11 in [Intel Atom Processor E3900
    Series](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.
  - Changed Microcodes:
  - | APL            | E0       | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx</changelog>
  <changelog author="meissner@suse.com" date="1652270400">- Updated to Intel CPU Microcode 20220510 release. (bsc#1199423)
  - CVE-2022-21151: Security updates for [INTEL-SA-000617](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.html)
  - Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [Intel Atom C3000 Processor Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/atom/atom-c3000-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [Intel Atom Processor E3900 Specification Update Addendum](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.
  - New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/03 |          | 0000001f | Core Gen12
  | ADL            | C0       | 06-97-05/03 |          | 0000001f | Core Gen12
  | ADL            | L0       | 06-9a-03/80 |          | 0000041c | Core Gen12
  | ADL            | L0       | 06-9a-04/80 |          | 0000041c | Core Gen12
  | ADL            | C0       | 06-bf-02/03 |          | 0000001f | Core Gen12
  | ADL            | C0       | 06-bf-02/03 |          | 0000001f | Core Gen12
  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | VLV            | D0       | 06-37-09/0F | 0000090c | 0000090d | Atom E38xx
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000ec | 000000f0 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 0100015c | 0100015d | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 0400320a | 04003302 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 0500320a | 05003302 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002402 | 07002501 | Xeon Scalable Gen3
  | APL            | D0       | 06-5c-09/03 | 00000046 | 00000048 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000ec | 000000f0 | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 00000036 | 00000038 | Atom C Series
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000331 | 0d000363 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 00000038 | 0000003a | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 0000001c | 0000001e | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a8 | 000000b0 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 0000002d | 00000031 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 | 0000009a | 000000a4 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000022 | 00000026 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003c | 0000003e | Core Gen11 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000ec | 000000f0 | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000ec | 000000f0 | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000ec | 000000f0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000ec | 000000f0 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen8 Mobile
  | EHL            | B1       | 06-96-01/01 | 00000015 | 00000016 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 | 2400001f | 24000023 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000ec | 000000f0 | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000ec | 000000f0 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000ec | 000000f0 | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000ec | 000000f0 | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000ec | 000000f0 | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000ec | 000000f0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000ec | 000000f0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000ee | 000000f0 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000ea | 000000f0 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000ec | 000000f0 | Core Gen10 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000050 | 00000053 | Core Gen11</changelog>
  <changelog author="meissner@suse.com" date="1660132800">- Updated to Intel CPU Microcode 20220809 release. (bsc#1201727)
  - CVE-2022-21233: Security updates for [INTEL-SA-00657](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html).
  - Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification
  +Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.  - Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | B1       | 06-55-03/97 | 0100015d | 0100015e | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon D-21xx
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000363 | 0d000375 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003a | 0000003c | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 0000001e | 00000020 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b0 | 000000b2 | Core Gen10 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000026 | 00000028 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003e | 00000040 | Core Gen11 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000053 | 00000054 | Core Gen11
  | ADL            | C0       | 06-97-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-97-05/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | C0       | 06-bf-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-bf-05/03 | 0000001f | 00000022 | Core Gen12</changelog>
  <changelog author="meissner@suse.com" date="1676462400">- Updated to Intel CPU Microcode 20230214 release.
  Security issues fixed:
  - CVE-2022-38090: Security updates for [INTEL-SA-00767](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html) (bsc#1208275)
  - CVE-2022-33196: Security updates for [INTEL-SA-00738](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html) (bsc#1208276)
  - CVE-2022-21216: Security updates for [INTEL-SA-00700](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html) (bsc#1208277)
  - CVE-2022-33972: Security updates for [INTEL-SA-00730](http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html) (bsc#1208479)
  New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SPR-SP         | E2       | 06-8f-05/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-HBM        | B3       | 06-8f-08/10 |          | 2c000170 | Xeon Max
  | RPL-P 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-H 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-97-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000424 | 00000429 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000424 | 00000429 | Core Gen12
  | CLX-SP         | B0       | 06-55-06/bf | 04003302 | 04003303 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003302 | 05003303 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002501 | 07002503 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003c | 0000003e | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 00000020 | 00000022 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-D          | B0       | 06-6c-01/10 | 01000201 | 01000211 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b6 | 000000b8 | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000375 | 0d000389 | Xeon Scalable Gen3
  | JSL            | A0/A1    | 06-9c-00/01 | 24000023 | 24000024 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | LKF            | B2/B3    | 06-8a-01/10 | 00000031 | 00000032 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000056 | 00000057 | Core Gen11
  | RPL-S          | S0       | 06-b7-01/32 | 0000010e | 00000112 | Core Gen13
  | SKX-SP         | B1       | 06-55-03/97 | 0100015e | 01000161 | Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1684238400">- Updated to Intel CPU Microcode 20230512 release. (bsc#1211382)
  - New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/01 |          | 00000010 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  | AZB            | R0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  - Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | L0       | 06-9a-03/80 | 00000429 | 0000042a | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000429 | 0000042a | Core Gen12
  | AML-Y22        | H0       | 06-8e-09/10 |          | 000000f2 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f4 | 000000f8 | Core Gen9 Mobile
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f0 | 000000f2 | Core Gen9
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f0 | 000000f2 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f0 | 000000f2 | Core Gen8
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f0 | 000000f2 | Core Gen8 Mobile
  | CLX-SP         | B0       | 06-55-06/bf | 04003303 | 04003501 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003303 | 05003501 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002503 | 07002601 | Xeon Scalable Gen3
  | ICL-D          | B0       | 06-6c-01/10 | 01000211 | 01000230 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b8 | 000000ba | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000389 | 0d000390 | Xeon Scalable Gen3
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000f0 | 000000f2 | Core Gen7; Xeon E3 v6
  | KBL-U/Y        | H0       | 06-8e-09/c0 |          | 000000f2 | Core Gen7 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000032 | 00000033 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000057 | 00000058 | Core Gen11
  | RPL-H 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-P 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-S          | S0       | 06-b7-01/32 | 00000112 | 00000113 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/07 | 0000410e | 00004112 | Core Gen13
  | SKX-D          | H0       | 06-55-04/b7 |          | 02006f05 | Xeon D-21xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000161 | 01000171 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 |          | 02006f05 | Xeon Scalable
  | SPR-HBM        | B3       | 06-8f-08/10 | 2c000170 | 2c0001d1 | Xeon Max
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S2       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S3       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | TGL            | B1       | 06-8c-01/80 | 000000a6 | 000000aa | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000042 | 00000044 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000028 | 0000002a | Core Gen11 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 |          | 000000f2 | Core Gen8 Mobile</changelog>
</package>
<package pkgid="1cc9d215a9524aa3a5c60de6f7a0d947967f4408bd85f3c0573507b1eb1f7840" name="udev" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="5a8e243d64fce819b00f739f0984851ce2152e3786697a9476f8cb55cb5e0718" name="udev" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="ed6556c202fc881931d3f61df12a189e3ccfb8acc01e964c6e1b7de82d7b3d48" name="udev" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="2c350636497a6e22a6ae64b42c4b79dec5eeef229fcc17048bb0fa6a6216fa89" name="util-linux" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="02452ab182a12fb999936712e28032e2cdbb00a65fb7ca92c9445ca94f67bd94" name="util-linux" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="c7f08e132c61bb30f772042ea16bead857d8cea8164fc2f6799561d12f80c797" name="util-linux" arch="src">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="7f29a09da4c07b53a4cdfdba0325fc945009be0ec6076f0d58267ea728db4035" name="util-linux" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="4bc1dcbbafee71f3863cd64cf5afcd85e22feaa6640949deb622a0a0b60b7ab8" name="util-linux-systemd" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="sbrabec@suse.com" date="1612440000">- Merge package with SLE15 SP3 and openSUSE Leap 15.3:
  Obsoletes upstreamed patches:
- libblkid: Do not trigger CDROM autoclose (v2.35, bsc#1084671,
  util-linux-libblkid-cdrom-autoclose-1.patch,
  util-linux-libblkid-cdrom-autoclose-2.patch,
  util-linux-libblkid-cdrom-autoclose-3.patch).
- lscpu: avoid segfault on PowerPC systems with valid hardware
  configurations
  (v2.36.1, bsc#1175623, bsc#1178554, bsc#1178825,
  lscpu-avoid-segfault-on-PowerPC-systems-with-valid-h.patch)
- Fix for SG#57988, bsc#1174942 (v2.36):
  libmount-fix-mount-a-EBUSY-for-cifs.patch: Fix warning on mounts
  to CIFS with mount –a.
- blockdev: Do not fail --report on kpartx-style partitions on
  multipath (v2.36,
  bsc#1168235, util-linux-blockdev-report-dm.patch).
- nologin: Add support for -c to prevent error from su -c
  (v2.35, bsc#1151708, util-linux-nologin-su-c.patch).
- Add libmount-Avoid-triggering-autofs-in-lookup_umount_fs.patch:
  Avoid triggering autofs in lookup_umount_fs_by_statfs
  (v2.36 boo#1168389)
- mount: fall back to device node name if /dev/mapper link not found
  (v2.34, bsc#1149911)
  * Add patch: util-linux-canonicalize-coverity-scan.patch
- De-duplicate fstrim -A properly (v2.34, bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (v2.34, boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).
- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (v2.34, bsc#1122417,
  util-linux-libmount-pseudofs.patch).
- agetty: Return previous response of agetty for special characters
  (v2.34, bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).
- Fix problems in reading of login.defs values (v2.34, bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="6c6f50355ee99a9ed51511472ede0dfcbfec6bec000c26f4d799d06299f5ff22" name="util-linux-systemd" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="sbrabec@suse.com" date="1612440000">- Merge package with SLE15 SP3 and openSUSE Leap 15.3:
  Obsoletes upstreamed patches:
- libblkid: Do not trigger CDROM autoclose (v2.35, bsc#1084671,
  util-linux-libblkid-cdrom-autoclose-1.patch,
  util-linux-libblkid-cdrom-autoclose-2.patch,
  util-linux-libblkid-cdrom-autoclose-3.patch).
- lscpu: avoid segfault on PowerPC systems with valid hardware
  configurations
  (v2.36.1, bsc#1175623, bsc#1178554, bsc#1178825,
  lscpu-avoid-segfault-on-PowerPC-systems-with-valid-h.patch)
- Fix for SG#57988, bsc#1174942 (v2.36):
  libmount-fix-mount-a-EBUSY-for-cifs.patch: Fix warning on mounts
  to CIFS with mount –a.
- blockdev: Do not fail --report on kpartx-style partitions on
  multipath (v2.36,
  bsc#1168235, util-linux-blockdev-report-dm.patch).
- nologin: Add support for -c to prevent error from su -c
  (v2.35, bsc#1151708, util-linux-nologin-su-c.patch).
- Add libmount-Avoid-triggering-autofs-in-lookup_umount_fs.patch:
  Avoid triggering autofs in lookup_umount_fs_by_statfs
  (v2.36 boo#1168389)
- mount: fall back to device node name if /dev/mapper link not found
  (v2.34, bsc#1149911)
  * Add patch: util-linux-canonicalize-coverity-scan.patch
- De-duplicate fstrim -A properly (v2.34, bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (v2.34, boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).
- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (v2.34, bsc#1122417,
  util-linux-libmount-pseudofs.patch).
- agetty: Return previous response of agetty for special characters
  (v2.34, bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).
- Fix problems in reading of login.defs values (v2.34, bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="d3ee3bf06da2a4b312887b508c27aec9cf277d89bc28f0e56485ea4855146320" name="util-linux-systemd" arch="src">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="sbrabec@suse.com" date="1612440000">- Merge package with SLE15 SP3 and openSUSE Leap 15.3:
  Obsoletes upstreamed patches:
- libblkid: Do not trigger CDROM autoclose (v2.35, bsc#1084671,
  util-linux-libblkid-cdrom-autoclose-1.patch,
  util-linux-libblkid-cdrom-autoclose-2.patch,
  util-linux-libblkid-cdrom-autoclose-3.patch).
- lscpu: avoid segfault on PowerPC systems with valid hardware
  configurations
  (v2.36.1, bsc#1175623, bsc#1178554, bsc#1178825,
  lscpu-avoid-segfault-on-PowerPC-systems-with-valid-h.patch)
- Fix for SG#57988, bsc#1174942 (v2.36):
  libmount-fix-mount-a-EBUSY-for-cifs.patch: Fix warning on mounts
  to CIFS with mount –a.
- blockdev: Do not fail --report on kpartx-style partitions on
  multipath (v2.36,
  bsc#1168235, util-linux-blockdev-report-dm.patch).
- nologin: Add support for -c to prevent error from su -c
  (v2.35, bsc#1151708, util-linux-nologin-su-c.patch).
- Add libmount-Avoid-triggering-autofs-in-lookup_umount_fs.patch:
  Avoid triggering autofs in lookup_umount_fs_by_statfs
  (v2.36 boo#1168389)
- mount: fall back to device node name if /dev/mapper link not found
  (v2.34, bsc#1149911)
  * Add patch: util-linux-canonicalize-coverity-scan.patch
- De-duplicate fstrim -A properly (v2.34, bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (v2.34, boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).
- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (v2.34, bsc#1122417,
  util-linux-libmount-pseudofs.patch).
- agetty: Return previous response of agetty for special characters
  (v2.34, bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).
- Fix problems in reading of login.defs values (v2.34, bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="e5cf582c386860a1bc38038f0384d8656ef376d0870bbd1a8a50058f485fa91a" name="util-linux-systemd" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="sbrabec@suse.com" date="1612440000">- Merge package with SLE15 SP3 and openSUSE Leap 15.3:
  Obsoletes upstreamed patches:
- libblkid: Do not trigger CDROM autoclose (v2.35, bsc#1084671,
  util-linux-libblkid-cdrom-autoclose-1.patch,
  util-linux-libblkid-cdrom-autoclose-2.patch,
  util-linux-libblkid-cdrom-autoclose-3.patch).
- lscpu: avoid segfault on PowerPC systems with valid hardware
  configurations
  (v2.36.1, bsc#1175623, bsc#1178554, bsc#1178825,
  lscpu-avoid-segfault-on-PowerPC-systems-with-valid-h.patch)
- Fix for SG#57988, bsc#1174942 (v2.36):
  libmount-fix-mount-a-EBUSY-for-cifs.patch: Fix warning on mounts
  to CIFS with mount –a.
- blockdev: Do not fail --report on kpartx-style partitions on
  multipath (v2.36,
  bsc#1168235, util-linux-blockdev-report-dm.patch).
- nologin: Add support for -c to prevent error from su -c
  (v2.35, bsc#1151708, util-linux-nologin-su-c.patch).
- Add libmount-Avoid-triggering-autofs-in-lookup_umount_fs.patch:
  Avoid triggering autofs in lookup_umount_fs_by_statfs
  (v2.36 boo#1168389)
- mount: fall back to device node name if /dev/mapper link not found
  (v2.34, bsc#1149911)
  * Add patch: util-linux-canonicalize-coverity-scan.patch
- De-duplicate fstrim -A properly (v2.34, bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (v2.34, boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).
- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (v2.34, bsc#1122417,
  util-linux-libmount-pseudofs.patch).
- agetty: Return previous response of agetty for special characters
  (v2.34, bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).
- Fix problems in reading of login.defs values (v2.34, bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="37b1589b45786dffa498020ff108d2bcdf30ac446572fd596cbcc017be089697" name="vim" arch="src">
  <version epoch="0" ver="9.0.1386" rel="150000.5.37.1"/>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
</package>
<package pkgid="3897350b93da8ba428cfc9f364eaa492c5e6b8848a57841d095d53dde0c5a62e" name="vim" arch="src">
  <version epoch="0" ver="9.0.1443" rel="150000.5.40.1"/>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
</package>
<package pkgid="c8d690af87680c577b4d748e3b76abaa937b4680d8d98f233334e9ca9b478bd1" name="vim" arch="src">
  <version epoch="0" ver="9.0.1443" rel="150000.5.43.1"/>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Make xxd conflicting the previous vim packages</changelog>
</package>
<package pkgid="110999863a1525c3184db56a6a57d47f21eea495c1fd6233937b3352a339f947" name="vim" arch="src">
  <version epoch="0" ver="9.0.1572" rel="150000.5.46.1"/>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Revert the creation standalone xxd packages</changelog>
  <changelog author="zbalogh@suse.com" date="1685620800">- Updated to version 9.0 with patch level 1572, fixes the following security problems
  * Fixing bsc#1210996 (CVE-2023-2426) - VUL-0: CVE-2023-2426: vim: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
  * Fixing bsc#1211256 (CVE-2023-2609) - VUL-1: CVE-2023-2609: vim: NULL Pointer Dereference prior to 9.0.1531
  * Fixing bsc#1211257 (CVE-2023-2610) - VUL-1: CVE-2023-2610: vim: Integer Overflow or Wraparound prior to 9.0.1532
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1443...v9.0.1572</changelog>
</package>
<package pkgid="89f3a0d6983f55436fe91ef92c37ce3f3de2f2c52899a4eaf1157b1d478549cc" name="vim-data-common" arch="noarch">
  <version epoch="0" ver="9.0.1386" rel="150000.5.37.1"/>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
</package>
<package pkgid="60685e75041847a4c8ca083b55524ac8be841ea0ce61c7f7693c3fd86de87371" name="vim-data-common" arch="noarch">
  <version epoch="0" ver="9.0.1443" rel="150000.5.40.1"/>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
</package>
<package pkgid="5fd875964d34df340059e989bb2b8f386fcfec8c092f9e5db793d02b028c921e" name="vim-data-common" arch="noarch">
  <version epoch="0" ver="9.0.1443" rel="150000.5.43.1"/>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Make xxd conflicting the previous vim packages</changelog>
</package>
<package pkgid="9e6e153b6d2ec2f786d4abfe58d091a0c40ea0acfc0d7ea5c658a5bfaeefa046" name="vim-data-common" arch="noarch">
  <version epoch="0" ver="9.0.1572" rel="150000.5.46.1"/>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Revert the creation standalone xxd packages</changelog>
  <changelog author="zbalogh@suse.com" date="1685620800">- Updated to version 9.0 with patch level 1572, fixes the following security problems
  * Fixing bsc#1210996 (CVE-2023-2426) - VUL-0: CVE-2023-2426: vim: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
  * Fixing bsc#1211256 (CVE-2023-2609) - VUL-1: CVE-2023-2609: vim: NULL Pointer Dereference prior to 9.0.1531
  * Fixing bsc#1211257 (CVE-2023-2610) - VUL-1: CVE-2023-2610: vim: Integer Overflow or Wraparound prior to 9.0.1532
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1443...v9.0.1572</changelog>
</package>
<package pkgid="06b9ff94bde83fef2de6d68dbfe9df1b20ace704c6892dcd5c9050fe7c9e4f56" name="vim-small" arch="aarch64">
  <version epoch="0" ver="9.0.1386" rel="150000.5.37.1"/>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
</package>
<package pkgid="4cc648cf5555d8e21d390981a0735da8f5c6d3f224f7e52db62c1fbd490e0bbf" name="vim-small" arch="s390x">
  <version epoch="0" ver="9.0.1386" rel="150000.5.37.1"/>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
</package>
<package pkgid="7ec80990cf3cdab072178df8897c88fe8e50d262e70af7939db8e862c6ad98ce" name="vim-small" arch="x86_64">
  <version epoch="0" ver="9.0.1386" rel="150000.5.37.1"/>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
</package>
<package pkgid="6c6864eb50e72d6aaf107530e8f479c52a83d0f58b3a2992d9e4f10d2de9867f" name="vim-small" arch="aarch64">
  <version epoch="0" ver="9.0.1443" rel="150000.5.40.1"/>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
</package>
<package pkgid="6c57a800a6aacaa7f4d732b9d08fa4a722c50e6c7579b5179d6b2ebfa79c77ee" name="vim-small" arch="s390x">
  <version epoch="0" ver="9.0.1443" rel="150000.5.40.1"/>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
</package>
<package pkgid="8280a4286c060ff90b32d2e889989127fe8a52a4eb143ba5b9cda7ec6e94495f" name="vim-small" arch="x86_64">
  <version epoch="0" ver="9.0.1443" rel="150000.5.40.1"/>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
</package>
<package pkgid="7119f244045d6504027c85ef2d8eaac8d02937b8e454b5039c25f6a3d99feaa9" name="vim-small" arch="aarch64">
  <version epoch="0" ver="9.0.1443" rel="150000.5.43.1"/>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Make xxd conflicting the previous vim packages</changelog>
</package>
<package pkgid="d6b0145fe15c92469d61b2929a21b2c745c9963da7f9420c16716d183db0c8a3" name="vim-small" arch="s390x">
  <version epoch="0" ver="9.0.1443" rel="150000.5.43.1"/>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Make xxd conflicting the previous vim packages</changelog>
</package>
<package pkgid="5f906aa4cb0fc8e26eb536582c4ff6c6a4802ee740e0e1242a417feeddf264d9" name="vim-small" arch="x86_64">
  <version epoch="0" ver="9.0.1443" rel="150000.5.43.1"/>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Make xxd conflicting the previous vim packages</changelog>
</package>
<package pkgid="e696082f0f1cb590a8435c091a162e24299efc8c588fe72c654a3148b134aa84" name="vim-small" arch="aarch64">
  <version epoch="0" ver="9.0.1572" rel="150000.5.46.1"/>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Revert the creation standalone xxd packages</changelog>
  <changelog author="zbalogh@suse.com" date="1685620800">- Updated to version 9.0 with patch level 1572, fixes the following security problems
  * Fixing bsc#1210996 (CVE-2023-2426) - VUL-0: CVE-2023-2426: vim: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
  * Fixing bsc#1211256 (CVE-2023-2609) - VUL-1: CVE-2023-2609: vim: NULL Pointer Dereference prior to 9.0.1531
  * Fixing bsc#1211257 (CVE-2023-2610) - VUL-1: CVE-2023-2610: vim: Integer Overflow or Wraparound prior to 9.0.1532
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1443...v9.0.1572</changelog>
</package>
<package pkgid="75746561a15d8945560547073c431feaefbd82d6c9e57f2eaa38338b8eea36bf" name="vim-small" arch="s390x">
  <version epoch="0" ver="9.0.1572" rel="150000.5.46.1"/>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Revert the creation standalone xxd packages</changelog>
  <changelog author="zbalogh@suse.com" date="1685620800">- Updated to version 9.0 with patch level 1572, fixes the following security problems
  * Fixing bsc#1210996 (CVE-2023-2426) - VUL-0: CVE-2023-2426: vim: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
  * Fixing bsc#1211256 (CVE-2023-2609) - VUL-1: CVE-2023-2609: vim: NULL Pointer Dereference prior to 9.0.1531
  * Fixing bsc#1211257 (CVE-2023-2610) - VUL-1: CVE-2023-2610: vim: Integer Overflow or Wraparound prior to 9.0.1532
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1443...v9.0.1572</changelog>
</package>
<package pkgid="dc0cf8c117fb915bfc391df86ec9d61ba1dff4e465018ca1cfd1fef4ea59ab8c" name="vim-small" arch="x86_64">
  <version epoch="0" ver="9.0.1572" rel="150000.5.46.1"/>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Revert the creation standalone xxd packages</changelog>
  <changelog author="zbalogh@suse.com" date="1685620800">- Updated to version 9.0 with patch level 1572, fixes the following security problems
  * Fixing bsc#1210996 (CVE-2023-2426) - VUL-0: CVE-2023-2426: vim: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
  * Fixing bsc#1211256 (CVE-2023-2609) - VUL-1: CVE-2023-2609: vim: NULL Pointer Dereference prior to 9.0.1531
  * Fixing bsc#1211257 (CVE-2023-2610) - VUL-1: CVE-2023-2610: vim: Integer Overflow or Wraparound prior to 9.0.1532
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1443...v9.0.1572</changelog>
</package>
<package pkgid="29ad0e32962d27a4dbb76928562a01ac3b2c9df5340dbeb24f9fe39fd3f6e6c4" name="wicked" arch="aarch64">
  <version epoch="0" ver="0.6.73" rel="150400.3.8.1"/>
  <changelog author="mt@suse.de" date="1554465600">- version 0.6.54
- switch to use systemd notify and prevent event backlog at start
  by calling udevadm settle before starting wickedd (bsc#1118206)
- dhcp6: don't discard confirm reply without status (bsc#1127340)
- ethtool: set lro legacy flag and not txvlan (bsc#1123555)
- init memory before use in ioctl
- fsm: fix find pending worker loop segfault (boo#1106809)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1565784000">- version 0.6.55
- dhcp6: do not default to a /64 address prefix-length (bsc#1132280)
  Add an address-length aka DHCLIENT6_ADDRESS_LENGTH ifcfg option, which
  permits to specify explicit prefix-length to use for the DHCPv6 address
  and override detection using RA prefix info and a default to /128.
- time: use boot time for timer instead of real time (bsc#1129986)
- dhcp: Consistently log dhcp xid and enabled to log dhcp6 timings line.
- dhcp6: lower unexpected xid messages to debug level
- systemd: change to depend on udev settle service (bsc#1136034,bsc#1132774)
  Calling udevadm settle directly caused systemd to kill wicked services.
- bridge: honour ifcfg LLADDR and set link address (bsc#1042123,boo#1142670)
- rfkill: fix switch statement to check enum variable not a constant (bsc#1140117)
- man: ifcfg-ovs-bridge(5): recommend STARTMODE=nfsroot
- dhcp4: nullify defer timer pointer when timeout (openSUSE/wicked#798,bsc#1142214)
- dhcp4: fix to request routing options when custom options are used (bsc#1132326)
- testing: add ifbind.sh helper script allowing to test hotplugging</changelog>
  <changelog author="mt@suse.com" date="1567771200">- version 0.6.56
- dhcp6: initial support to request prefix for delegations (jsc#SLE-5936)
- dhcp6: set the noprefixroute address option (bsc#1132280)</changelog>
  <changelog author="mt@suse.com" date="1568894400">- version 0.6.57
- dhcp6: omit noprefixroute with address-length (bsc#1150972)
  Permit to assume that the address prefix-length override specified
  in the config is a valid on-link prefix length, to let the kernel
  create a route for this prefix.
- dhcp6: differentiated mode=auto resolving from RA (bsc#1150183)
  Fixed to not trigger to report an error when ipv6 RA is not
  available or the received RA disables dhcp while mode is set to
  auto, but to deliver a 'deferred' results.</changelog>
  <changelog author="mt@suse.com" date="1570190400">- version 0.6.60
- libwicked: fix versioning and packaging (bsc#1143182,bsc#1132977)
  shipping the internal helper library inside of the wicked package.</changelog>
  <changelog author="mt@suse.com" date="1576065600">- version 0.6.61
- dracut: add initial cmdline parsing as a config source
- address: don't check hwaddr length if parsing as ARPHRD_VOID
- utils: added find and insert var array utils, cleanup
- client: add show-policy command calling policy generation
- client: initial support to generate a basic policy directly
- client: cleanup convert and show-config commands</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1582718400">- version 0.6.62
- dhcp4: discard lease on client-id mismatch (CVE-2020-7217,bsc#1160906)
- dhcp4: free lease on response without message type (CVE-2020-7216,bsc#1160905)
- dhcp6: don't add free'd IA to ia_pd_list on T1&gt;T2 (CVE-2019-18903,bsc#1160904)
- dhcp6: fix use-after-free on option parsing failure (CVE-2019-18902,bsc#1160903)
- utils: don't reject NULL var array names/keys breaking wicked duid dump
- routes: schema fix to avoid not applying rto_min incl. new time format (bsc#1160939)
- systemd: order start wicked after network-pre.target and openvswitch.service start
- packaging: use pkgconfig(libsystemd) instead of systemd-devel
- misc bug fixes by Malte Kraus including undefined behaviour, memory access alignment
- corrections, use-after-free, missed initialization and format errors</changelog>
  <changelog author="mt@suse.com" date="1583323200">- version 0.6.63
- spec: fix old libwicked package provides/obsoletes (bsc#1165180)
- ipv6: support to apply stable secret ifsysctl (jsc#SLE-6960)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1601467200">- version 0.6.64
- avoid incomplete ifdown/timeout on route deletion error (bsc#1174099)
- dhcp4: add DHCLIENT_CREATE_CID to ifcfg (jsc#SLE-15770)
- wicked: fixes to ifreload on port changes (bsc#1168155,bsc#1172082)
- team: fix schema to use correct hwaddr_policy property (boo#1171234)
- team: enable ipv6 on ports when nsna_ping linkwatch is used (bsc#959556)</changelog>
  <changelog author="mt@suse.com" date="1614859200">- version 0.6.65
- ifconfig: differentiate if to re-trigger dad on address updates (bsc#1177215)
- client: parse sysctl files in the correct order (bsc#1181186)
- ifup: fix for set up with unenslave from unconfigured master (boo#954329)
- rpm: prepare for new builds using usrmerged rpm macro (boo#1029961)
- rpm: Let wicked-service also provide service(network)
- cleanup: remove obsolete use-nanny=false (gh#openSUSE/wicked#815)
- dbus: add variant container, generic object-path and uint32 array macros</changelog>
  <changelog author="mt@suse.com" date="1617796800">- dhcp4: discover on reboot timeout after start-delay (bsc#1181812)
  [+ 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
- dhcp6: request nis options on sle15 by default (bsc#1181812)
  [+ 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.6.66
- wireless: migrate to wpa-supplicant v1 DBus interface (bsc#1156920)
  - support multiple networks configurations per interface
  - show connection status and scan-results (bsc#1160654)
  - corrected eap-tls,ttls cetificate handling and open vs. shared
    wep,open,psk,eap-tls,ttls,peap parsing from ifcfg (bsc#1057592)
  - cleanups and several other improvements, see changes
  - updated man ifcfg-wireless manual pages
- nanny: fix identify node owner exit condition
- schema: several xml-schema and dbus/property improvements
- utils: format/parse bitmap to array and string alternatives
- client: expose ethtool --get-permanent-address option
- removed sle15-sp3 patches included in the master sources (bsc#1181812)
  [- 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
  [- 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- bond: workaround 6.1 kernel enslave regression (boo#1206674)
- update to version 0.6.72
- client: add `wicked firmware extensions|interfaces|enable|disable`
  command to improve `ibft`,`nbft`,`redfish` firmware extension and
  interface handling.
- client: improve error handling in netif firmware discovery
  extension execution and extension definition overrides in
  the wicked-config.
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular
  version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise mode names
- update to version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes
- spec: Add /etc/sysconfig/network to file list, no longer in the
  default list of a cleaned up filesystem package on tumbleweed
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
</package>
<package pkgid="75d91a8e43eafe53e7d108e5a49132a953d8cb202680be543937e60c262c5cf6" name="wicked" arch="s390x">
  <version epoch="0" ver="0.6.73" rel="150400.3.8.1"/>
  <changelog author="mt@suse.de" date="1554465600">- version 0.6.54
- switch to use systemd notify and prevent event backlog at start
  by calling udevadm settle before starting wickedd (bsc#1118206)
- dhcp6: don't discard confirm reply without status (bsc#1127340)
- ethtool: set lro legacy flag and not txvlan (bsc#1123555)
- init memory before use in ioctl
- fsm: fix find pending worker loop segfault (boo#1106809)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1565784000">- version 0.6.55
- dhcp6: do not default to a /64 address prefix-length (bsc#1132280)
  Add an address-length aka DHCLIENT6_ADDRESS_LENGTH ifcfg option, which
  permits to specify explicit prefix-length to use for the DHCPv6 address
  and override detection using RA prefix info and a default to /128.
- time: use boot time for timer instead of real time (bsc#1129986)
- dhcp: Consistently log dhcp xid and enabled to log dhcp6 timings line.
- dhcp6: lower unexpected xid messages to debug level
- systemd: change to depend on udev settle service (bsc#1136034,bsc#1132774)
  Calling udevadm settle directly caused systemd to kill wicked services.
- bridge: honour ifcfg LLADDR and set link address (bsc#1042123,boo#1142670)
- rfkill: fix switch statement to check enum variable not a constant (bsc#1140117)
- man: ifcfg-ovs-bridge(5): recommend STARTMODE=nfsroot
- dhcp4: nullify defer timer pointer when timeout (openSUSE/wicked#798,bsc#1142214)
- dhcp4: fix to request routing options when custom options are used (bsc#1132326)
- testing: add ifbind.sh helper script allowing to test hotplugging</changelog>
  <changelog author="mt@suse.com" date="1567771200">- version 0.6.56
- dhcp6: initial support to request prefix for delegations (jsc#SLE-5936)
- dhcp6: set the noprefixroute address option (bsc#1132280)</changelog>
  <changelog author="mt@suse.com" date="1568894400">- version 0.6.57
- dhcp6: omit noprefixroute with address-length (bsc#1150972)
  Permit to assume that the address prefix-length override specified
  in the config is a valid on-link prefix length, to let the kernel
  create a route for this prefix.
- dhcp6: differentiated mode=auto resolving from RA (bsc#1150183)
  Fixed to not trigger to report an error when ipv6 RA is not
  available or the received RA disables dhcp while mode is set to
  auto, but to deliver a 'deferred' results.</changelog>
  <changelog author="mt@suse.com" date="1570190400">- version 0.6.60
- libwicked: fix versioning and packaging (bsc#1143182,bsc#1132977)
  shipping the internal helper library inside of the wicked package.</changelog>
  <changelog author="mt@suse.com" date="1576065600">- version 0.6.61
- dracut: add initial cmdline parsing as a config source
- address: don't check hwaddr length if parsing as ARPHRD_VOID
- utils: added find and insert var array utils, cleanup
- client: add show-policy command calling policy generation
- client: initial support to generate a basic policy directly
- client: cleanup convert and show-config commands</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1582718400">- version 0.6.62
- dhcp4: discard lease on client-id mismatch (CVE-2020-7217,bsc#1160906)
- dhcp4: free lease on response without message type (CVE-2020-7216,bsc#1160905)
- dhcp6: don't add free'd IA to ia_pd_list on T1&gt;T2 (CVE-2019-18903,bsc#1160904)
- dhcp6: fix use-after-free on option parsing failure (CVE-2019-18902,bsc#1160903)
- utils: don't reject NULL var array names/keys breaking wicked duid dump
- routes: schema fix to avoid not applying rto_min incl. new time format (bsc#1160939)
- systemd: order start wicked after network-pre.target and openvswitch.service start
- packaging: use pkgconfig(libsystemd) instead of systemd-devel
- misc bug fixes by Malte Kraus including undefined behaviour, memory access alignment
- corrections, use-after-free, missed initialization and format errors</changelog>
  <changelog author="mt@suse.com" date="1583323200">- version 0.6.63
- spec: fix old libwicked package provides/obsoletes (bsc#1165180)
- ipv6: support to apply stable secret ifsysctl (jsc#SLE-6960)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1601467200">- version 0.6.64
- avoid incomplete ifdown/timeout on route deletion error (bsc#1174099)
- dhcp4: add DHCLIENT_CREATE_CID to ifcfg (jsc#SLE-15770)
- wicked: fixes to ifreload on port changes (bsc#1168155,bsc#1172082)
- team: fix schema to use correct hwaddr_policy property (boo#1171234)
- team: enable ipv6 on ports when nsna_ping linkwatch is used (bsc#959556)</changelog>
  <changelog author="mt@suse.com" date="1614859200">- version 0.6.65
- ifconfig: differentiate if to re-trigger dad on address updates (bsc#1177215)
- client: parse sysctl files in the correct order (bsc#1181186)
- ifup: fix for set up with unenslave from unconfigured master (boo#954329)
- rpm: prepare for new builds using usrmerged rpm macro (boo#1029961)
- rpm: Let wicked-service also provide service(network)
- cleanup: remove obsolete use-nanny=false (gh#openSUSE/wicked#815)
- dbus: add variant container, generic object-path and uint32 array macros</changelog>
  <changelog author="mt@suse.com" date="1617796800">- dhcp4: discover on reboot timeout after start-delay (bsc#1181812)
  [+ 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
- dhcp6: request nis options on sle15 by default (bsc#1181812)
  [+ 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.6.66
- wireless: migrate to wpa-supplicant v1 DBus interface (bsc#1156920)
  - support multiple networks configurations per interface
  - show connection status and scan-results (bsc#1160654)
  - corrected eap-tls,ttls cetificate handling and open vs. shared
    wep,open,psk,eap-tls,ttls,peap parsing from ifcfg (bsc#1057592)
  - cleanups and several other improvements, see changes
  - updated man ifcfg-wireless manual pages
- nanny: fix identify node owner exit condition
- schema: several xml-schema and dbus/property improvements
- utils: format/parse bitmap to array and string alternatives
- client: expose ethtool --get-permanent-address option
- removed sle15-sp3 patches included in the master sources (bsc#1181812)
  [- 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
  [- 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- bond: workaround 6.1 kernel enslave regression (boo#1206674)
- update to version 0.6.72
- client: add `wicked firmware extensions|interfaces|enable|disable`
  command to improve `ibft`,`nbft`,`redfish` firmware extension and
  interface handling.
- client: improve error handling in netif firmware discovery
  extension execution and extension definition overrides in
  the wicked-config.
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular
  version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise mode names
- update to version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes
- spec: Add /etc/sysconfig/network to file list, no longer in the
  default list of a cleaned up filesystem package on tumbleweed
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
</package>
<package pkgid="6b9c663a86036036f5a349ed9c18d06225559383f51ea48704f218da53d7871e" name="wicked" arch="src">
  <version epoch="0" ver="0.6.73" rel="150400.3.8.1"/>
  <changelog author="mt@suse.de" date="1554465600">- version 0.6.54
- switch to use systemd notify and prevent event backlog at start
  by calling udevadm settle before starting wickedd (bsc#1118206)
- dhcp6: don't discard confirm reply without status (bsc#1127340)
- ethtool: set lro legacy flag and not txvlan (bsc#1123555)
- init memory before use in ioctl
- fsm: fix find pending worker loop segfault (boo#1106809)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1565784000">- version 0.6.55
- dhcp6: do not default to a /64 address prefix-length (bsc#1132280)
  Add an address-length aka DHCLIENT6_ADDRESS_LENGTH ifcfg option, which
  permits to specify explicit prefix-length to use for the DHCPv6 address
  and override detection using RA prefix info and a default to /128.
- time: use boot time for timer instead of real time (bsc#1129986)
- dhcp: Consistently log dhcp xid and enabled to log dhcp6 timings line.
- dhcp6: lower unexpected xid messages to debug level
- systemd: change to depend on udev settle service (bsc#1136034,bsc#1132774)
  Calling udevadm settle directly caused systemd to kill wicked services.
- bridge: honour ifcfg LLADDR and set link address (bsc#1042123,boo#1142670)
- rfkill: fix switch statement to check enum variable not a constant (bsc#1140117)
- man: ifcfg-ovs-bridge(5): recommend STARTMODE=nfsroot
- dhcp4: nullify defer timer pointer when timeout (openSUSE/wicked#798,bsc#1142214)
- dhcp4: fix to request routing options when custom options are used (bsc#1132326)
- testing: add ifbind.sh helper script allowing to test hotplugging</changelog>
  <changelog author="mt@suse.com" date="1567771200">- version 0.6.56
- dhcp6: initial support to request prefix for delegations (jsc#SLE-5936)
- dhcp6: set the noprefixroute address option (bsc#1132280)</changelog>
  <changelog author="mt@suse.com" date="1568894400">- version 0.6.57
- dhcp6: omit noprefixroute with address-length (bsc#1150972)
  Permit to assume that the address prefix-length override specified
  in the config is a valid on-link prefix length, to let the kernel
  create a route for this prefix.
- dhcp6: differentiated mode=auto resolving from RA (bsc#1150183)
  Fixed to not trigger to report an error when ipv6 RA is not
  available or the received RA disables dhcp while mode is set to
  auto, but to deliver a 'deferred' results.</changelog>
  <changelog author="mt@suse.com" date="1570190400">- version 0.6.60
- libwicked: fix versioning and packaging (bsc#1143182,bsc#1132977)
  shipping the internal helper library inside of the wicked package.</changelog>
  <changelog author="mt@suse.com" date="1576065600">- version 0.6.61
- dracut: add initial cmdline parsing as a config source
- address: don't check hwaddr length if parsing as ARPHRD_VOID
- utils: added find and insert var array utils, cleanup
- client: add show-policy command calling policy generation
- client: initial support to generate a basic policy directly
- client: cleanup convert and show-config commands</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1582718400">- version 0.6.62
- dhcp4: discard lease on client-id mismatch (CVE-2020-7217,bsc#1160906)
- dhcp4: free lease on response without message type (CVE-2020-7216,bsc#1160905)
- dhcp6: don't add free'd IA to ia_pd_list on T1&gt;T2 (CVE-2019-18903,bsc#1160904)
- dhcp6: fix use-after-free on option parsing failure (CVE-2019-18902,bsc#1160903)
- utils: don't reject NULL var array names/keys breaking wicked duid dump
- routes: schema fix to avoid not applying rto_min incl. new time format (bsc#1160939)
- systemd: order start wicked after network-pre.target and openvswitch.service start
- packaging: use pkgconfig(libsystemd) instead of systemd-devel
- misc bug fixes by Malte Kraus including undefined behaviour, memory access alignment
- corrections, use-after-free, missed initialization and format errors</changelog>
  <changelog author="mt@suse.com" date="1583323200">- version 0.6.63
- spec: fix old libwicked package provides/obsoletes (bsc#1165180)
- ipv6: support to apply stable secret ifsysctl (jsc#SLE-6960)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1601467200">- version 0.6.64
- avoid incomplete ifdown/timeout on route deletion error (bsc#1174099)
- dhcp4: add DHCLIENT_CREATE_CID to ifcfg (jsc#SLE-15770)
- wicked: fixes to ifreload on port changes (bsc#1168155,bsc#1172082)
- team: fix schema to use correct hwaddr_policy property (boo#1171234)
- team: enable ipv6 on ports when nsna_ping linkwatch is used (bsc#959556)</changelog>
  <changelog author="mt@suse.com" date="1614859200">- version 0.6.65
- ifconfig: differentiate if to re-trigger dad on address updates (bsc#1177215)
- client: parse sysctl files in the correct order (bsc#1181186)
- ifup: fix for set up with unenslave from unconfigured master (boo#954329)
- rpm: prepare for new builds using usrmerged rpm macro (boo#1029961)
- rpm: Let wicked-service also provide service(network)
- cleanup: remove obsolete use-nanny=false (gh#openSUSE/wicked#815)
- dbus: add variant container, generic object-path and uint32 array macros</changelog>
  <changelog author="mt@suse.com" date="1617796800">- dhcp4: discover on reboot timeout after start-delay (bsc#1181812)
  [+ 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
- dhcp6: request nis options on sle15 by default (bsc#1181812)
  [+ 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.6.66
- wireless: migrate to wpa-supplicant v1 DBus interface (bsc#1156920)
  - support multiple networks configurations per interface
  - show connection status and scan-results (bsc#1160654)
  - corrected eap-tls,ttls cetificate handling and open vs. shared
    wep,open,psk,eap-tls,ttls,peap parsing from ifcfg (bsc#1057592)
  - cleanups and several other improvements, see changes
  - updated man ifcfg-wireless manual pages
- nanny: fix identify node owner exit condition
- schema: several xml-schema and dbus/property improvements
- utils: format/parse bitmap to array and string alternatives
- client: expose ethtool --get-permanent-address option
- removed sle15-sp3 patches included in the master sources (bsc#1181812)
  [- 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
  [- 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- bond: workaround 6.1 kernel enslave regression (boo#1206674)
- update to version 0.6.72
- client: add `wicked firmware extensions|interfaces|enable|disable`
  command to improve `ibft`,`nbft`,`redfish` firmware extension and
  interface handling.
- client: improve error handling in netif firmware discovery
  extension execution and extension definition overrides in
  the wicked-config.
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular
  version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise mode names
- update to version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes
- spec: Add /etc/sysconfig/network to file list, no longer in the
  default list of a cleaned up filesystem package on tumbleweed
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
</package>
<package pkgid="84a03faf7e336cb16bd9e23d1810090850d194258faa9b1345952ad1a0e64332" name="wicked" arch="x86_64">
  <version epoch="0" ver="0.6.73" rel="150400.3.8.1"/>
  <changelog author="mt@suse.de" date="1554465600">- version 0.6.54
- switch to use systemd notify and prevent event backlog at start
  by calling udevadm settle before starting wickedd (bsc#1118206)
- dhcp6: don't discard confirm reply without status (bsc#1127340)
- ethtool: set lro legacy flag and not txvlan (bsc#1123555)
- init memory before use in ioctl
- fsm: fix find pending worker loop segfault (boo#1106809)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1565784000">- version 0.6.55
- dhcp6: do not default to a /64 address prefix-length (bsc#1132280)
  Add an address-length aka DHCLIENT6_ADDRESS_LENGTH ifcfg option, which
  permits to specify explicit prefix-length to use for the DHCPv6 address
  and override detection using RA prefix info and a default to /128.
- time: use boot time for timer instead of real time (bsc#1129986)
- dhcp: Consistently log dhcp xid and enabled to log dhcp6 timings line.
- dhcp6: lower unexpected xid messages to debug level
- systemd: change to depend on udev settle service (bsc#1136034,bsc#1132774)
  Calling udevadm settle directly caused systemd to kill wicked services.
- bridge: honour ifcfg LLADDR and set link address (bsc#1042123,boo#1142670)
- rfkill: fix switch statement to check enum variable not a constant (bsc#1140117)
- man: ifcfg-ovs-bridge(5): recommend STARTMODE=nfsroot
- dhcp4: nullify defer timer pointer when timeout (openSUSE/wicked#798,bsc#1142214)
- dhcp4: fix to request routing options when custom options are used (bsc#1132326)
- testing: add ifbind.sh helper script allowing to test hotplugging</changelog>
  <changelog author="mt@suse.com" date="1567771200">- version 0.6.56
- dhcp6: initial support to request prefix for delegations (jsc#SLE-5936)
- dhcp6: set the noprefixroute address option (bsc#1132280)</changelog>
  <changelog author="mt@suse.com" date="1568894400">- version 0.6.57
- dhcp6: omit noprefixroute with address-length (bsc#1150972)
  Permit to assume that the address prefix-length override specified
  in the config is a valid on-link prefix length, to let the kernel
  create a route for this prefix.
- dhcp6: differentiated mode=auto resolving from RA (bsc#1150183)
  Fixed to not trigger to report an error when ipv6 RA is not
  available or the received RA disables dhcp while mode is set to
  auto, but to deliver a 'deferred' results.</changelog>
  <changelog author="mt@suse.com" date="1570190400">- version 0.6.60
- libwicked: fix versioning and packaging (bsc#1143182,bsc#1132977)
  shipping the internal helper library inside of the wicked package.</changelog>
  <changelog author="mt@suse.com" date="1576065600">- version 0.6.61
- dracut: add initial cmdline parsing as a config source
- address: don't check hwaddr length if parsing as ARPHRD_VOID
- utils: added find and insert var array utils, cleanup
- client: add show-policy command calling policy generation
- client: initial support to generate a basic policy directly
- client: cleanup convert and show-config commands</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1582718400">- version 0.6.62
- dhcp4: discard lease on client-id mismatch (CVE-2020-7217,bsc#1160906)
- dhcp4: free lease on response without message type (CVE-2020-7216,bsc#1160905)
- dhcp6: don't add free'd IA to ia_pd_list on T1&gt;T2 (CVE-2019-18903,bsc#1160904)
- dhcp6: fix use-after-free on option parsing failure (CVE-2019-18902,bsc#1160903)
- utils: don't reject NULL var array names/keys breaking wicked duid dump
- routes: schema fix to avoid not applying rto_min incl. new time format (bsc#1160939)
- systemd: order start wicked after network-pre.target and openvswitch.service start
- packaging: use pkgconfig(libsystemd) instead of systemd-devel
- misc bug fixes by Malte Kraus including undefined behaviour, memory access alignment
- corrections, use-after-free, missed initialization and format errors</changelog>
  <changelog author="mt@suse.com" date="1583323200">- version 0.6.63
- spec: fix old libwicked package provides/obsoletes (bsc#1165180)
- ipv6: support to apply stable secret ifsysctl (jsc#SLE-6960)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1601467200">- version 0.6.64
- avoid incomplete ifdown/timeout on route deletion error (bsc#1174099)
- dhcp4: add DHCLIENT_CREATE_CID to ifcfg (jsc#SLE-15770)
- wicked: fixes to ifreload on port changes (bsc#1168155,bsc#1172082)
- team: fix schema to use correct hwaddr_policy property (boo#1171234)
- team: enable ipv6 on ports when nsna_ping linkwatch is used (bsc#959556)</changelog>
  <changelog author="mt@suse.com" date="1614859200">- version 0.6.65
- ifconfig: differentiate if to re-trigger dad on address updates (bsc#1177215)
- client: parse sysctl files in the correct order (bsc#1181186)
- ifup: fix for set up with unenslave from unconfigured master (boo#954329)
- rpm: prepare for new builds using usrmerged rpm macro (boo#1029961)
- rpm: Let wicked-service also provide service(network)
- cleanup: remove obsolete use-nanny=false (gh#openSUSE/wicked#815)
- dbus: add variant container, generic object-path and uint32 array macros</changelog>
  <changelog author="mt@suse.com" date="1617796800">- dhcp4: discover on reboot timeout after start-delay (bsc#1181812)
  [+ 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
- dhcp6: request nis options on sle15 by default (bsc#1181812)
  [+ 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.6.66
- wireless: migrate to wpa-supplicant v1 DBus interface (bsc#1156920)
  - support multiple networks configurations per interface
  - show connection status and scan-results (bsc#1160654)
  - corrected eap-tls,ttls cetificate handling and open vs. shared
    wep,open,psk,eap-tls,ttls,peap parsing from ifcfg (bsc#1057592)
  - cleanups and several other improvements, see changes
  - updated man ifcfg-wireless manual pages
- nanny: fix identify node owner exit condition
- schema: several xml-schema and dbus/property improvements
- utils: format/parse bitmap to array and string alternatives
- client: expose ethtool --get-permanent-address option
- removed sle15-sp3 patches included in the master sources (bsc#1181812)
  [- 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
  [- 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- bond: workaround 6.1 kernel enslave regression (boo#1206674)
- update to version 0.6.72
- client: add `wicked firmware extensions|interfaces|enable|disable`
  command to improve `ibft`,`nbft`,`redfish` firmware extension and
  interface handling.
- client: improve error handling in netif firmware discovery
  extension execution and extension definition overrides in
  the wicked-config.
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular
  version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise mode names
- update to version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes
- spec: Add /etc/sysconfig/network to file list, no longer in the
  default list of a cleaned up filesystem package on tumbleweed
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
</package>
<package pkgid="3ab86331a46824088e2f1f715b79fc99f021b31ba6cd4dc7e758c05367149646" name="wicked-service" arch="aarch64">
  <version epoch="0" ver="0.6.73" rel="150400.3.8.1"/>
  <changelog author="mt@suse.de" date="1554465600">- version 0.6.54
- switch to use systemd notify and prevent event backlog at start
  by calling udevadm settle before starting wickedd (bsc#1118206)
- dhcp6: don't discard confirm reply without status (bsc#1127340)
- ethtool: set lro legacy flag and not txvlan (bsc#1123555)
- init memory before use in ioctl
- fsm: fix find pending worker loop segfault (boo#1106809)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1565784000">- version 0.6.55
- dhcp6: do not default to a /64 address prefix-length (bsc#1132280)
  Add an address-length aka DHCLIENT6_ADDRESS_LENGTH ifcfg option, which
  permits to specify explicit prefix-length to use for the DHCPv6 address
  and override detection using RA prefix info and a default to /128.
- time: use boot time for timer instead of real time (bsc#1129986)
- dhcp: Consistently log dhcp xid and enabled to log dhcp6 timings line.
- dhcp6: lower unexpected xid messages to debug level
- systemd: change to depend on udev settle service (bsc#1136034,bsc#1132774)
  Calling udevadm settle directly caused systemd to kill wicked services.
- bridge: honour ifcfg LLADDR and set link address (bsc#1042123,boo#1142670)
- rfkill: fix switch statement to check enum variable not a constant (bsc#1140117)
- man: ifcfg-ovs-bridge(5): recommend STARTMODE=nfsroot
- dhcp4: nullify defer timer pointer when timeout (openSUSE/wicked#798,bsc#1142214)
- dhcp4: fix to request routing options when custom options are used (bsc#1132326)
- testing: add ifbind.sh helper script allowing to test hotplugging</changelog>
  <changelog author="mt@suse.com" date="1567771200">- version 0.6.56
- dhcp6: initial support to request prefix for delegations (jsc#SLE-5936)
- dhcp6: set the noprefixroute address option (bsc#1132280)</changelog>
  <changelog author="mt@suse.com" date="1568894400">- version 0.6.57
- dhcp6: omit noprefixroute with address-length (bsc#1150972)
  Permit to assume that the address prefix-length override specified
  in the config is a valid on-link prefix length, to let the kernel
  create a route for this prefix.
- dhcp6: differentiated mode=auto resolving from RA (bsc#1150183)
  Fixed to not trigger to report an error when ipv6 RA is not
  available or the received RA disables dhcp while mode is set to
  auto, but to deliver a 'deferred' results.</changelog>
  <changelog author="mt@suse.com" date="1570190400">- version 0.6.60
- libwicked: fix versioning and packaging (bsc#1143182,bsc#1132977)
  shipping the internal helper library inside of the wicked package.</changelog>
  <changelog author="mt@suse.com" date="1576065600">- version 0.6.61
- dracut: add initial cmdline parsing as a config source
- address: don't check hwaddr length if parsing as ARPHRD_VOID
- utils: added find and insert var array utils, cleanup
- client: add show-policy command calling policy generation
- client: initial support to generate a basic policy directly
- client: cleanup convert and show-config commands</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1582718400">- version 0.6.62
- dhcp4: discard lease on client-id mismatch (CVE-2020-7217,bsc#1160906)
- dhcp4: free lease on response without message type (CVE-2020-7216,bsc#1160905)
- dhcp6: don't add free'd IA to ia_pd_list on T1&gt;T2 (CVE-2019-18903,bsc#1160904)
- dhcp6: fix use-after-free on option parsing failure (CVE-2019-18902,bsc#1160903)
- utils: don't reject NULL var array names/keys breaking wicked duid dump
- routes: schema fix to avoid not applying rto_min incl. new time format (bsc#1160939)
- systemd: order start wicked after network-pre.target and openvswitch.service start
- packaging: use pkgconfig(libsystemd) instead of systemd-devel
- misc bug fixes by Malte Kraus including undefined behaviour, memory access alignment
- corrections, use-after-free, missed initialization and format errors</changelog>
  <changelog author="mt@suse.com" date="1583323200">- version 0.6.63
- spec: fix old libwicked package provides/obsoletes (bsc#1165180)
- ipv6: support to apply stable secret ifsysctl (jsc#SLE-6960)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1601467200">- version 0.6.64
- avoid incomplete ifdown/timeout on route deletion error (bsc#1174099)
- dhcp4: add DHCLIENT_CREATE_CID to ifcfg (jsc#SLE-15770)
- wicked: fixes to ifreload on port changes (bsc#1168155,bsc#1172082)
- team: fix schema to use correct hwaddr_policy property (boo#1171234)
- team: enable ipv6 on ports when nsna_ping linkwatch is used (bsc#959556)</changelog>
  <changelog author="mt@suse.com" date="1614859200">- version 0.6.65
- ifconfig: differentiate if to re-trigger dad on address updates (bsc#1177215)
- client: parse sysctl files in the correct order (bsc#1181186)
- ifup: fix for set up with unenslave from unconfigured master (boo#954329)
- rpm: prepare for new builds using usrmerged rpm macro (boo#1029961)
- rpm: Let wicked-service also provide service(network)
- cleanup: remove obsolete use-nanny=false (gh#openSUSE/wicked#815)
- dbus: add variant container, generic object-path and uint32 array macros</changelog>
  <changelog author="mt@suse.com" date="1617796800">- dhcp4: discover on reboot timeout after start-delay (bsc#1181812)
  [+ 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
- dhcp6: request nis options on sle15 by default (bsc#1181812)
  [+ 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.6.66
- wireless: migrate to wpa-supplicant v1 DBus interface (bsc#1156920)
  - support multiple networks configurations per interface
  - show connection status and scan-results (bsc#1160654)
  - corrected eap-tls,ttls cetificate handling and open vs. shared
    wep,open,psk,eap-tls,ttls,peap parsing from ifcfg (bsc#1057592)
  - cleanups and several other improvements, see changes
  - updated man ifcfg-wireless manual pages
- nanny: fix identify node owner exit condition
- schema: several xml-schema and dbus/property improvements
- utils: format/parse bitmap to array and string alternatives
- client: expose ethtool --get-permanent-address option
- removed sle15-sp3 patches included in the master sources (bsc#1181812)
  [- 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
  [- 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- bond: workaround 6.1 kernel enslave regression (boo#1206674)
- update to version 0.6.72
- client: add `wicked firmware extensions|interfaces|enable|disable`
  command to improve `ibft`,`nbft`,`redfish` firmware extension and
  interface handling.
- client: improve error handling in netif firmware discovery
  extension execution and extension definition overrides in
  the wicked-config.
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular
  version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise mode names
- update to version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes
- spec: Add /etc/sysconfig/network to file list, no longer in the
  default list of a cleaned up filesystem package on tumbleweed
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
</package>
<package pkgid="1f4003e6832367532ded3f043d42010450fc9121ab012d27ec28bb810cdff5ba" name="wicked-service" arch="s390x">
  <version epoch="0" ver="0.6.73" rel="150400.3.8.1"/>
  <changelog author="mt@suse.de" date="1554465600">- version 0.6.54
- switch to use systemd notify and prevent event backlog at start
  by calling udevadm settle before starting wickedd (bsc#1118206)
- dhcp6: don't discard confirm reply without status (bsc#1127340)
- ethtool: set lro legacy flag and not txvlan (bsc#1123555)
- init memory before use in ioctl
- fsm: fix find pending worker loop segfault (boo#1106809)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1565784000">- version 0.6.55
- dhcp6: do not default to a /64 address prefix-length (bsc#1132280)
  Add an address-length aka DHCLIENT6_ADDRESS_LENGTH ifcfg option, which
  permits to specify explicit prefix-length to use for the DHCPv6 address
  and override detection using RA prefix info and a default to /128.
- time: use boot time for timer instead of real time (bsc#1129986)
- dhcp: Consistently log dhcp xid and enabled to log dhcp6 timings line.
- dhcp6: lower unexpected xid messages to debug level
- systemd: change to depend on udev settle service (bsc#1136034,bsc#1132774)
  Calling udevadm settle directly caused systemd to kill wicked services.
- bridge: honour ifcfg LLADDR and set link address (bsc#1042123,boo#1142670)
- rfkill: fix switch statement to check enum variable not a constant (bsc#1140117)
- man: ifcfg-ovs-bridge(5): recommend STARTMODE=nfsroot
- dhcp4: nullify defer timer pointer when timeout (openSUSE/wicked#798,bsc#1142214)
- dhcp4: fix to request routing options when custom options are used (bsc#1132326)
- testing: add ifbind.sh helper script allowing to test hotplugging</changelog>
  <changelog author="mt@suse.com" date="1567771200">- version 0.6.56
- dhcp6: initial support to request prefix for delegations (jsc#SLE-5936)
- dhcp6: set the noprefixroute address option (bsc#1132280)</changelog>
  <changelog author="mt@suse.com" date="1568894400">- version 0.6.57
- dhcp6: omit noprefixroute with address-length (bsc#1150972)
  Permit to assume that the address prefix-length override specified
  in the config is a valid on-link prefix length, to let the kernel
  create a route for this prefix.
- dhcp6: differentiated mode=auto resolving from RA (bsc#1150183)
  Fixed to not trigger to report an error when ipv6 RA is not
  available or the received RA disables dhcp while mode is set to
  auto, but to deliver a 'deferred' results.</changelog>
  <changelog author="mt@suse.com" date="1570190400">- version 0.6.60
- libwicked: fix versioning and packaging (bsc#1143182,bsc#1132977)
  shipping the internal helper library inside of the wicked package.</changelog>
  <changelog author="mt@suse.com" date="1576065600">- version 0.6.61
- dracut: add initial cmdline parsing as a config source
- address: don't check hwaddr length if parsing as ARPHRD_VOID
- utils: added find and insert var array utils, cleanup
- client: add show-policy command calling policy generation
- client: initial support to generate a basic policy directly
- client: cleanup convert and show-config commands</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1582718400">- version 0.6.62
- dhcp4: discard lease on client-id mismatch (CVE-2020-7217,bsc#1160906)
- dhcp4: free lease on response without message type (CVE-2020-7216,bsc#1160905)
- dhcp6: don't add free'd IA to ia_pd_list on T1&gt;T2 (CVE-2019-18903,bsc#1160904)
- dhcp6: fix use-after-free on option parsing failure (CVE-2019-18902,bsc#1160903)
- utils: don't reject NULL var array names/keys breaking wicked duid dump
- routes: schema fix to avoid not applying rto_min incl. new time format (bsc#1160939)
- systemd: order start wicked after network-pre.target and openvswitch.service start
- packaging: use pkgconfig(libsystemd) instead of systemd-devel
- misc bug fixes by Malte Kraus including undefined behaviour, memory access alignment
- corrections, use-after-free, missed initialization and format errors</changelog>
  <changelog author="mt@suse.com" date="1583323200">- version 0.6.63
- spec: fix old libwicked package provides/obsoletes (bsc#1165180)
- ipv6: support to apply stable secret ifsysctl (jsc#SLE-6960)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1601467200">- version 0.6.64
- avoid incomplete ifdown/timeout on route deletion error (bsc#1174099)
- dhcp4: add DHCLIENT_CREATE_CID to ifcfg (jsc#SLE-15770)
- wicked: fixes to ifreload on port changes (bsc#1168155,bsc#1172082)
- team: fix schema to use correct hwaddr_policy property (boo#1171234)
- team: enable ipv6 on ports when nsna_ping linkwatch is used (bsc#959556)</changelog>
  <changelog author="mt@suse.com" date="1614859200">- version 0.6.65
- ifconfig: differentiate if to re-trigger dad on address updates (bsc#1177215)
- client: parse sysctl files in the correct order (bsc#1181186)
- ifup: fix for set up with unenslave from unconfigured master (boo#954329)
- rpm: prepare for new builds using usrmerged rpm macro (boo#1029961)
- rpm: Let wicked-service also provide service(network)
- cleanup: remove obsolete use-nanny=false (gh#openSUSE/wicked#815)
- dbus: add variant container, generic object-path and uint32 array macros</changelog>
  <changelog author="mt@suse.com" date="1617796800">- dhcp4: discover on reboot timeout after start-delay (bsc#1181812)
  [+ 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
- dhcp6: request nis options on sle15 by default (bsc#1181812)
  [+ 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.6.66
- wireless: migrate to wpa-supplicant v1 DBus interface (bsc#1156920)
  - support multiple networks configurations per interface
  - show connection status and scan-results (bsc#1160654)
  - corrected eap-tls,ttls cetificate handling and open vs. shared
    wep,open,psk,eap-tls,ttls,peap parsing from ifcfg (bsc#1057592)
  - cleanups and several other improvements, see changes
  - updated man ifcfg-wireless manual pages
- nanny: fix identify node owner exit condition
- schema: several xml-schema and dbus/property improvements
- utils: format/parse bitmap to array and string alternatives
- client: expose ethtool --get-permanent-address option
- removed sle15-sp3 patches included in the master sources (bsc#1181812)
  [- 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
  [- 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- bond: workaround 6.1 kernel enslave regression (boo#1206674)
- update to version 0.6.72
- client: add `wicked firmware extensions|interfaces|enable|disable`
  command to improve `ibft`,`nbft`,`redfish` firmware extension and
  interface handling.
- client: improve error handling in netif firmware discovery
  extension execution and extension definition overrides in
  the wicked-config.
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular
  version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise mode names
- update to version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes
- spec: Add /etc/sysconfig/network to file list, no longer in the
  default list of a cleaned up filesystem package on tumbleweed
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
</package>
<package pkgid="bcd0aa87115ecb7a47c2feb413627d8a64b20022b8b18b42e77e34214521744f" name="wicked-service" arch="x86_64">
  <version epoch="0" ver="0.6.73" rel="150400.3.8.1"/>
  <changelog author="mt@suse.de" date="1554465600">- version 0.6.54
- switch to use systemd notify and prevent event backlog at start
  by calling udevadm settle before starting wickedd (bsc#1118206)
- dhcp6: don't discard confirm reply without status (bsc#1127340)
- ethtool: set lro legacy flag and not txvlan (bsc#1123555)
- init memory before use in ioctl
- fsm: fix find pending worker loop segfault (boo#1106809)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1565784000">- version 0.6.55
- dhcp6: do not default to a /64 address prefix-length (bsc#1132280)
  Add an address-length aka DHCLIENT6_ADDRESS_LENGTH ifcfg option, which
  permits to specify explicit prefix-length to use for the DHCPv6 address
  and override detection using RA prefix info and a default to /128.
- time: use boot time for timer instead of real time (bsc#1129986)
- dhcp: Consistently log dhcp xid and enabled to log dhcp6 timings line.
- dhcp6: lower unexpected xid messages to debug level
- systemd: change to depend on udev settle service (bsc#1136034,bsc#1132774)
  Calling udevadm settle directly caused systemd to kill wicked services.
- bridge: honour ifcfg LLADDR and set link address (bsc#1042123,boo#1142670)
- rfkill: fix switch statement to check enum variable not a constant (bsc#1140117)
- man: ifcfg-ovs-bridge(5): recommend STARTMODE=nfsroot
- dhcp4: nullify defer timer pointer when timeout (openSUSE/wicked#798,bsc#1142214)
- dhcp4: fix to request routing options when custom options are used (bsc#1132326)
- testing: add ifbind.sh helper script allowing to test hotplugging</changelog>
  <changelog author="mt@suse.com" date="1567771200">- version 0.6.56
- dhcp6: initial support to request prefix for delegations (jsc#SLE-5936)
- dhcp6: set the noprefixroute address option (bsc#1132280)</changelog>
  <changelog author="mt@suse.com" date="1568894400">- version 0.6.57
- dhcp6: omit noprefixroute with address-length (bsc#1150972)
  Permit to assume that the address prefix-length override specified
  in the config is a valid on-link prefix length, to let the kernel
  create a route for this prefix.
- dhcp6: differentiated mode=auto resolving from RA (bsc#1150183)
  Fixed to not trigger to report an error when ipv6 RA is not
  available or the received RA disables dhcp while mode is set to
  auto, but to deliver a 'deferred' results.</changelog>
  <changelog author="mt@suse.com" date="1570190400">- version 0.6.60
- libwicked: fix versioning and packaging (bsc#1143182,bsc#1132977)
  shipping the internal helper library inside of the wicked package.</changelog>
  <changelog author="mt@suse.com" date="1576065600">- version 0.6.61
- dracut: add initial cmdline parsing as a config source
- address: don't check hwaddr length if parsing as ARPHRD_VOID
- utils: added find and insert var array utils, cleanup
- client: add show-policy command calling policy generation
- client: initial support to generate a basic policy directly
- client: cleanup convert and show-config commands</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1582718400">- version 0.6.62
- dhcp4: discard lease on client-id mismatch (CVE-2020-7217,bsc#1160906)
- dhcp4: free lease on response without message type (CVE-2020-7216,bsc#1160905)
- dhcp6: don't add free'd IA to ia_pd_list on T1&gt;T2 (CVE-2019-18903,bsc#1160904)
- dhcp6: fix use-after-free on option parsing failure (CVE-2019-18902,bsc#1160903)
- utils: don't reject NULL var array names/keys breaking wicked duid dump
- routes: schema fix to avoid not applying rto_min incl. new time format (bsc#1160939)
- systemd: order start wicked after network-pre.target and openvswitch.service start
- packaging: use pkgconfig(libsystemd) instead of systemd-devel
- misc bug fixes by Malte Kraus including undefined behaviour, memory access alignment
- corrections, use-after-free, missed initialization and format errors</changelog>
  <changelog author="mt@suse.com" date="1583323200">- version 0.6.63
- spec: fix old libwicked package provides/obsoletes (bsc#1165180)
- ipv6: support to apply stable secret ifsysctl (jsc#SLE-6960)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1601467200">- version 0.6.64
- avoid incomplete ifdown/timeout on route deletion error (bsc#1174099)
- dhcp4: add DHCLIENT_CREATE_CID to ifcfg (jsc#SLE-15770)
- wicked: fixes to ifreload on port changes (bsc#1168155,bsc#1172082)
- team: fix schema to use correct hwaddr_policy property (boo#1171234)
- team: enable ipv6 on ports when nsna_ping linkwatch is used (bsc#959556)</changelog>
  <changelog author="mt@suse.com" date="1614859200">- version 0.6.65
- ifconfig: differentiate if to re-trigger dad on address updates (bsc#1177215)
- client: parse sysctl files in the correct order (bsc#1181186)
- ifup: fix for set up with unenslave from unconfigured master (boo#954329)
- rpm: prepare for new builds using usrmerged rpm macro (boo#1029961)
- rpm: Let wicked-service also provide service(network)
- cleanup: remove obsolete use-nanny=false (gh#openSUSE/wicked#815)
- dbus: add variant container, generic object-path and uint32 array macros</changelog>
  <changelog author="mt@suse.com" date="1617796800">- dhcp4: discover on reboot timeout after start-delay (bsc#1181812)
  [+ 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
- dhcp6: request nis options on sle15 by default (bsc#1181812)
  [+ 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.6.66
- wireless: migrate to wpa-supplicant v1 DBus interface (bsc#1156920)
  - support multiple networks configurations per interface
  - show connection status and scan-results (bsc#1160654)
  - corrected eap-tls,ttls cetificate handling and open vs. shared
    wep,open,psk,eap-tls,ttls,peap parsing from ifcfg (bsc#1057592)
  - cleanups and several other improvements, see changes
  - updated man ifcfg-wireless manual pages
- nanny: fix identify node owner exit condition
- schema: several xml-schema and dbus/property improvements
- utils: format/parse bitmap to array and string alternatives
- client: expose ethtool --get-permanent-address option
- removed sle15-sp3 patches included in the master sources (bsc#1181812)
  [- 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
  [- 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property macros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="mt@suse.com" date="1649851200">- version 0.6.69
- redfish: decode smbios and setup host interface
  Add initial support to decode the SMBIOS Management Controller Host
  Interface (Type 42) structure and expose it as wicked `firmware:redfish`
  configuration to setup a Host Network Interface (to the BMC) using the
  `Redfish over IP` protocol allowing access to the Redfish Service (via
  redfish-localhost in /etc/hosts) used to manage the computer system.
  Tech Preview (jsc#SLE-17762).
- buffer: fix size_t length downcast to uint, add guards to init functions
- wireless: fix to not expect colons in 64byte long wpa-psk hex hash string
- xml-schema: reference counting fix to not crash at exit on schema errors
- compat-suse: match sysctl.d /etc vs. /run read order with systemd-sysctl,
  remove obsolete (sle11/sysconfig) lines about ifup-sysctl from ifsysctl.5.
- compat-suse: fix reading of sysctl addr_gen_mode to wrong variable
- auto6: fix to apply DNS from RA rdnss after ifdown/ifup (bsc#1181429)
- removed obsolete patch included in the master sources (bsc#1194392)
  [- 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1666267200">- version 0.6.70
- build: Link as Position Independent Executable (bsc#1184124)
- dhcp4: Fix issues in reuse of last lease (bsc#1187655)
- dhcp6: Add option to refresh lease (jsc#SLE-9492,jsc#SLE-24307)
- dhcp6: Remove address before release (USGv6 DHCPv6_1_2_07b)
- dhcp6: Ignore lease release status (USGv6 DHCPv6_1_2_07e,1_3_03)
- dhcp6: Consider ppp interfaces supported (gh#openSUSE/wicked#924)
- team: Fix to configure port priority in teamd (bsc#1200505)
- firewall-ext: No config change on ifdown (bsc#1201053,bsc#118950)
- wireless: Fix SEGV on supplicant restart (gh#openSUSE/wicked#931)
- wireless: Add support for WPA3 and PMF (bsc#1198894)
- wireless: Remove libiw dependencies (gh#openSUSE/wicked#910)
- client: Fix SEGV on empty xpath results (gh#openSUSE/wicked#919)
- client: Add release options to ifdown/ifreload (jsc#SLE-10249)
- dbus: Clear string array before append (gh#openSUSE/wicked#913)
- socket: Fix SEGV on heavy socket restart errors (bsc#1192508)
- systemd: Remove systemd-udev-settle dependency (bsc#1186787)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1686830400">- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- bond: workaround 6.1 kernel enslave regression (boo#1206674)
- update to version 0.6.72
- client: add `wicked firmware extensions|interfaces|enable|disable`
  command to improve `ibft`,`nbft`,`redfish` firmware extension and
  interface handling.
- client: improve error handling in netif firmware discovery
  extension execution and extension definition overrides in
  the wicked-config.
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular
  version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise mode names
- update to version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes
- spec: Add /etc/sysconfig/network to file list, no longer in the
  default list of a cleaned up filesystem package on tumbleweed
  (https://github.com/openSUSE/wicked/pull/939).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1688558400">- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]</changelog>
</package>
<package pkgid="34e1070a16b7a641a80f2bd65d06f0ec9cbd74b7ef440fa5cc0b86dcb2cc4089" name="xen" arch="src">
  <version epoch="0" ver="4.16.3_06" rel="150400.4.25.1"/>
  <changelog author="schubi@suse.com" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="carnold@suse.com" date="1657627200">- bsc#1201394 - VUL-0: CVE-2022-33745: xen: insufficient TLB flush
  for x86 PV guests in shadow mode (XSA-408)
  xsa408.patch
- Fix gcc13 compilation error
  62c56cc0-libxc-fix-compilation-error-with-gcc13.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1657713600">- bsc#1199965 - VUL-0: CVE-2022-26362: xen: Race condition
  in typeref acquisition
  62a1e594-x86-clean-up-_get_page_type.patch
  62a1e5b0-x86-ABAC-race-in-_get_page_type.patch
- bsc#1199966 - VUL-0: CVE-2022-26363,CVE-2022-26364: xen:
  Insufficient care with non-coherent mappings
  62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch
  62a1e5f0-x86-dont-change-cacheability-of-directmap.patch
  62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch
  62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch
  62a1e649-x86-track-and-flush-non-coherent.patch
- bsc#1200549 VUL-0: CVE-2022-21123,CVE-2022-21125,CVE-2022-21166:
  xen: x86: MMIO Stale Data vulnerabilities (XSA-404)
  62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch
  62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch
  62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch
- bsc#1201469 - VUL-0: CVE-2022-23816,CVE-2022-23825,CVE-2022-29900:
  xen: retbleed - arbitrary speculative code execution with return
  instructions (XSA-407)
  62cc31ed-x86-honour-spec-ctrl-0-for-unpriv-mmio.patch
  62cc31ee-cmdline-extend-parse_boolean.patch
  62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch
  62cd91d0-x86-spec-ctrl-rework-context-switching.patch
  62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch
  62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch
  62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch
  62cd91d5-x86-cpuid-BTC_NO-enum.patch
  62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch
  62cd91d7-x86-spec-ctrl-mitigate-Branch-Type-Confusion.patch
- Upstream bug fixes (bsc#1027519)
  62a99614-IOMMU-x86-gcc12.patch
  62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch
  62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch
- Drop patches replaced by upstream versions
  xsa401-1.patch
  xsa401-2.patch
  xsa402-1.patch
  xsa402-2.patch
  xsa402-3.patch
  xsa402-4.patch
  xsa402-5.patch</changelog>
  <changelog author="carnold@suse.com" date="1657713601">- Added --disable-pvshim when running configure in xen.spec.
  We have never shipped the shim and don't need to build it.</changelog>
  <changelog author="ohering@suse.de" date="1659009600">- bsc#1167608, bsc#1201631 - fix built-in default of max_event_channels
  A previous change to the built-in default had a logic error,
  effectively restoring the upstream limit of 1023 channels per domU.
  Fix the logic to calculate the default based on the number of vcpus.
  adjust libxl.max_event_channels.patch</changelog>
  <changelog author="carnold@suse.com" date="1660824000">- Update to Xen 4.16.2 bug fix release (bsc#1027519)
  xen-4.16.2-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Drop patches contained in new tarball
  625fca42-VT-d-reserved-CAP-ND.patch
  626f7ee8-x86-MSR-handle-P5-MC-reads.patch
  627549d6-IO-shutdown-race.patch
  62a1e594-x86-clean-up-_get_page_type.patch
  62a1e5b0-x86-ABAC-race-in-_get_page_type.patch
  62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch
  62a1e5f0-x86-dont-change-cacheability-of-directmap.patch
  62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch
  62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch
  62a1e649-x86-track-and-flush-non-coherent.patch
  62a99614-IOMMU-x86-gcc12.patch
  62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch
  62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch
  62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch
  62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch
  62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch
  62c56cc0-libxc-fix-compilation-error-with-gcc13.patch
  62cc31ed-x86-honour-spec-ctrl-0-for-unpriv-mmio.patch
  62cc31ee-cmdline-extend-parse_boolean.patch
  62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch
  62cd91d0-x86-spec-ctrl-rework-context-switching.patch
  62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch
  62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch
  62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch
  62cd91d5-x86-cpuid-BTC_NO-enum.patch
  62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch
  62cd91d7-x86-spec-ctrl-mitigate-Branch-Type-Confusion.patch
  xsa408.patch</changelog>
  <changelog author="carnold@suse.com" date="1661256000">- Things are compiling fine now with gcc12.
  Drop gcc12-fixes.patch</changelog>
  <changelog author="carnold@suse.com" date="1661774400">- bsc#1201994 - Xen DomU unable to emulate audio device
  62fde97e-tools-libxl-Replace-deprecated-soundhw-on-QEMU-command-line.patch</changelog>
  <changelog author="carnold@suse.com" date="1664366400">- bsc#1203806 - VUL-0: CVE-2022-33746: xen: P2M pool freeing may
  take excessively long (XSA-410)
  xsa410-01.patch
  xsa410-02.patch
  xsa410-03.patch
  xsa410-04.patch
  xsa410-05.patch
  xsa410-06.patch
  xsa410-07.patch
  xsa410-08.patch
  xsa410-09.patch
  xsa410-10.patch
- bsc#1203807 - VUL-0: CVE-2022-33748: xen: lock order inversion in
  transitive grant copy handling (XSA-411)
  xsa411.patch</changelog>
  <changelog author="carnold@suse.com" date="1666180800">- bsc#1204483 - VUL-0: CVE-2022-42327: xen: x86: unintended memory
  sharing between guests (XSA-412)
  xsa412.patch</changelog>
  <changelog author="carnold@suse.com" date="1666180801">- bsc#1204482 - VUL-0: CVE-2022-42311, CVE-2022-42312,
  CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316,
  CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let
  xenstored run out of memory (XSA-326)
  xsa326-01.patch
  xsa326-02.patch
  xsa326-03.patch
  xsa326-04.patch
  xsa326-05.patch
  xsa326-06.patch
  xsa326-07.patch
  xsa326-08.patch
  xsa326-09.patch
  xsa326-10.patch
  xsa326-11.patch
  xsa326-12.patch
  xsa326-13.patch
  xsa326-14.patch
  xsa326-15.patch
  xsa326-16.patch
- bsc#1204485 - VUL-0: CVE-2022-42309: xen: Xenstore: Guests can
  crash xenstored (XSA-414)
  xsa414.patch
- bsc#1204487 - VUL-0: CVE-2022-42310: xen: Xenstore: Guests can
  create orphaned Xenstore nodes (XSA-415)
  xsa415.patch
- bsc#1204488 - VUL-0: CVE-2022-42319: xen: Xenstore: Guests can
  cause Xenstore to not free temporary memory (XSA-416)
  xsa416.patch
- bsc#1204489 - VUL-0: CVE-2022-42320: xen: Xenstore: Guests can
  get access to Xenstore nodes of deleted domains (XSA-417)
  xsa417.patch
- bsc#1204490 - VUL-0: CVE-2022-42321: xen: Xenstore: Guests can
  crash xenstored via exhausting the stack (XSA-418)
  xsa418-01.patch
  xsa418-02.patch
  xsa418-03.patch
  xsa418-04.patch
  xsa418-05.patch
  xsa418-06.patch
  xsa418-07.patch
- bsc#1204494 - VUL-0: CVE-2022-42322,CVE-2022-42323: xen:
  Xenstore: cooperating guests can create arbitrary numbers of
  nodes (XSA-419)
  xsa419-01.patch
  xsa419-02.patch
  xsa419-03.patch
- bsc#1204496 - VUL-0: CVE-2022-42325,CVE-2022-42326: xen:
  Xenstore: Guests can create arbitray number of nodes via
  transactions (XSA-421)
  xsa421-01.patch
  xsa421-02.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1666699200">- bsc#1203806 - VUL-0: CVE-2022-33746: xen: P2M pool freeing may
  take excessively long (XSA-410)
  63455f82-Arm-P2M-prevent-adding-mapping-when-dying.patch
  63455fa8-Arm-P2M-preempt-when-freeing-intermediate.patch
  63455fc3-x86-p2m_teardown-allow-skip-root-pt-removal.patch
  63455fe4-x86-HAP-monitor-table-error-handling.patch
  63456000-x86-tolerate-sh_set_toplevel_shadow-failure.patch
  6345601d-x86-tolerate-shadow_prealloc-failure.patch
  6345603a-x86-P2M-refuse-new-alloc-for-dying.patch
  63456057-x86-P2M-truly-free-paging-pool-for-dying.patch
  63456075-x86-P2M-free-paging-pool-preemptively.patch
  63456090-x86-p2m_teardown-preemption.patch
- bcs#1203804 - VUL-0: CVE-2022-33747: xen: unbounded memory consumption
  for 2nd-level page tables on ARM systems (XSA-409)
  63456175-libxl-per-arch-extra-default-paging-memory.patch
  63456177-Arm-construct-P2M-pool-for-guests.patch
  6345617a-Arm-XEN_DOMCTL_shadow_op.patch
  6345617c-Arm-take-P2M-pages-P2M-pool.patch
- bsc#1203807 - VUL-0: CVE-2022-33748: xen: lock order inversion in
  transitive grant copy handling (XSA-411)
  634561aa-gnttab-locking-on-transitive-copy-error-path.patch
- Upstream bug fixes (bsc#1027519)
  6306185f-x86-XSTATE-CPUID-subleaf-1-EBX.patch
  631b5ba6-gnttab-acquire-resource-vaddrs.patch
  634561f1-x86emul-respect-NSCB.patch
  6346e404-VMX-correct-error-handling-in-vmx_create_vmcs.patch
  6351095c-Arm-rework-p2m_init.patch
  6351096a-Arm-P2M-populate-pages-for-GICv2-mapping.patch
  635274c0-EFI-dont-convert-runtime-mem-to-RAM.patch
  635665fb-sched-fix-restore_vcpu_affinity.patch
  63569723-x86-shadow-replace-bogus-assertions.patch
- Drop patches replaced by upstream versions:
  xsa410-01.patch
  xsa410-02.patch
  xsa410-03.patch
  xsa410-04.patch
  xsa410-05.patch
  xsa410-06.patch
  xsa410-07.patch
  xsa410-08.patch
  xsa410-09.patch
  xsa410-10.patch
  xsa411.patch</changelog>
  <changelog author="carnold@suse.com" date="1666958400">- bsc#1193923 - VUL-1: xen: Frontends vulnerable to backends
  (XSA-376)
  61dd5f64-limit-support-statement-for-Linux-and-Windows-frontends.patch</changelog>
  <changelog author="carnold@suse.com" date="1668081600">- bsc#1205209 - VUL-0: CVE-2022-23824: xen: x86: Multiple
  speculative security issues (XSA-422)
  636a9130-x86-spec-ctrl-Enumeration-for-IBPB_RET.patch
  636a9130-x86-spec-ctrl-Mitigate-IBPB-not-flushing-the-RSB-RAS.patch</changelog>
  <changelog author="carnold@suse.com" date="1671451200">- Update to Xen 4.16.3 bug fix release (bsc#1027519)
  xen-4.16.3-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Drop patches contained in new tarball
  62fde97e-tools-libxl-Replace-deprecated-soundhw-on-QEMU-command-line.patch
  6306185f-x86-XSTATE-CPUID-subleaf-1-EBX.patch
  631b5ba6-gnttab-acquire-resource-vaddrs.patch
  63455f82-Arm-P2M-prevent-adding-mapping-when-dying.patch
  63455fa8-Arm-P2M-preempt-when-freeing-intermediate.patch
  63455fc3-x86-p2m_teardown-allow-skip-root-pt-removal.patch
  63455fe4-x86-HAP-monitor-table-error-handling.patch
  63456000-x86-tolerate-sh_set_toplevel_shadow-failure.patch
  6345601d-x86-tolerate-shadow_prealloc-failure.patch
  6345603a-x86-P2M-refuse-new-alloc-for-dying.patch
  63456057-x86-P2M-truly-free-paging-pool-for-dying.patch
  63456075-x86-P2M-free-paging-pool-preemptively.patch
  63456090-x86-p2m_teardown-preemption.patch
  63456175-libxl-per-arch-extra-default-paging-memory.patch
  63456177-Arm-construct-P2M-pool-for-guests.patch
  6345617a-Arm-XEN_DOMCTL_shadow_op.patch
  6345617c-Arm-take-P2M-pages-P2M-pool.patch
  634561aa-gnttab-locking-on-transitive-copy-error-path.patch
  634561f1-x86emul-respect-NSCB.patch
  6346e404-VMX-correct-error-handling-in-vmx_create_vmcs.patch
  6351095c-Arm-rework-p2m_init.patch
  6351096a-Arm-P2M-populate-pages-for-GICv2-mapping.patch
  635274c0-EFI-dont-convert-runtime-mem-to-RAM.patch
  635665fb-sched-fix-restore_vcpu_affinity.patch
  63569723-x86-shadow-replace-bogus-assertions.patch
  636a9130-x86-spec-ctrl-Enumeration-for-IBPB_RET.patch
  636a9130-x86-spec-ctrl-Mitigate-IBPB-not-flushing-the-RSB-RAS.patch
  xsa326-01.patch
  xsa326-02.patch
  xsa326-03.patch
  xsa326-04.patch
  xsa326-05.patch
  xsa326-06.patch
  xsa326-07.patch
  xsa326-08.patch
  xsa326-09.patch
  xsa326-10.patch
  xsa326-11.patch
  xsa326-12.patch
  xsa326-13.patch
  xsa326-14.patch
  xsa326-15.patch
  xsa326-16.patch
  xsa412.patch
  xsa414.patch
  xsa415.patch
  xsa416.patch
  xsa417.patch
  xsa418-01.patch
  xsa418-02.patch
  xsa418-03.patch
  xsa418-04.patch
  xsa418-05.patch
  xsa418-06.patch
  xsa418-07.patch
  xsa419-01.patch
  xsa419-02.patch
  xsa419-03.patch
  xsa421-01.patch
  xsa421-02.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1671537600">- Upstream bug fixes (bsc#1027519)
  63a03e28-x86-high-freq-TSC-overflow.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1675684800">- Upstream bug fixes (bsc#1027519)
  63c05478-VMX-calculate-model-specific-LBRs-once.patch
  63c05478-VMX-support-CPUs-without-model-specific-LBR.patch</changelog>
  <changelog author="carnold@suse.com" date="1675944000">- bsc#1205792 - Partner-L3: launch-xenstore error messages show in
  SLES15 SP4 xen kernel.
  63e4da00-dont-log-errors-when-trying-to-load-PVH-xenstore-stubdom.patch</changelog>
  <changelog author="carnold@suse.com" date="1676462400">- bsc#1208286 - VUL-0: CVE-2022-27672: xen: Cross-Thread Return
  Address Predictions (XSA-426)
  63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch</changelog>
  <changelog author="carnold@suse.com" date="1678190400">- bsc#1209017 - VUL-0: CVE-2022-42332: xen: x86 shadow plus
  log-dirty mode use-after-free (XSA-427)
  xsa427.patch
- bsc#1209018 - VUL-0: CVE-2022-42333,CVE-2022-42334: xen: x86/HVM
  pinned cache attributes mis-handling (XSA-428)
  xsa428-1.patch
  xsa428-2.patch
- bsc#1209019 - VUL-0: CVE-2022-42331: xen: x86: speculative
  vulnerability in 32bit SYSCALL path (XSA-429)
  xsa429.patch</changelog>
</package>
<package pkgid="2554073b7404f199c944bc3aad87fde064fb3edbfb42441c3925c4011a741505" name="xen" arch="src">
  <version epoch="0" ver="4.16.4_02" rel="150400.4.28.1"/>
  <changelog author="ohering@suse.de" date="1659009600">- bsc#1167608, bsc#1201631 - fix built-in default of max_event_channels
  A previous change to the built-in default had a logic error,
  effectively restoring the upstream limit of 1023 channels per domU.
  Fix the logic to calculate the default based on the number of vcpus.
  adjust libxl.max_event_channels.patch</changelog>
  <changelog author="carnold@suse.com" date="1660824000">- Update to Xen 4.16.2 bug fix release (bsc#1027519)
  xen-4.16.2-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Drop patches contained in new tarball
  625fca42-VT-d-reserved-CAP-ND.patch
  626f7ee8-x86-MSR-handle-P5-MC-reads.patch
  627549d6-IO-shutdown-race.patch
  62a1e594-x86-clean-up-_get_page_type.patch
  62a1e5b0-x86-ABAC-race-in-_get_page_type.patch
  62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch
  62a1e5f0-x86-dont-change-cacheability-of-directmap.patch
  62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch
  62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch
  62a1e649-x86-track-and-flush-non-coherent.patch
  62a99614-IOMMU-x86-gcc12.patch
  62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch
  62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch
  62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch
  62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch
  62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch
  62c56cc0-libxc-fix-compilation-error-with-gcc13.patch
  62cc31ed-x86-honour-spec-ctrl-0-for-unpriv-mmio.patch
  62cc31ee-cmdline-extend-parse_boolean.patch
  62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch
  62cd91d0-x86-spec-ctrl-rework-context-switching.patch
  62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch
  62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch
  62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch
  62cd91d5-x86-cpuid-BTC_NO-enum.patch
  62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch
  62cd91d7-x86-spec-ctrl-mitigate-Branch-Type-Confusion.patch
  xsa408.patch</changelog>
  <changelog author="carnold@suse.com" date="1661256000">- Things are compiling fine now with gcc12.
  Drop gcc12-fixes.patch</changelog>
  <changelog author="carnold@suse.com" date="1661774400">- bsc#1201994 - Xen DomU unable to emulate audio device
  62fde97e-tools-libxl-Replace-deprecated-soundhw-on-QEMU-command-line.patch</changelog>
  <changelog author="carnold@suse.com" date="1664366400">- bsc#1203806 - VUL-0: CVE-2022-33746: xen: P2M pool freeing may
  take excessively long (XSA-410)
  xsa410-01.patch
  xsa410-02.patch
  xsa410-03.patch
  xsa410-04.patch
  xsa410-05.patch
  xsa410-06.patch
  xsa410-07.patch
  xsa410-08.patch
  xsa410-09.patch
  xsa410-10.patch
- bsc#1203807 - VUL-0: CVE-2022-33748: xen: lock order inversion in
  transitive grant copy handling (XSA-411)
  xsa411.patch</changelog>
  <changelog author="carnold@suse.com" date="1666180800">- bsc#1204483 - VUL-0: CVE-2022-42327: xen: x86: unintended memory
  sharing between guests (XSA-412)
  xsa412.patch</changelog>
  <changelog author="carnold@suse.com" date="1666180801">- bsc#1204482 - VUL-0: CVE-2022-42311, CVE-2022-42312,
  CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316,
  CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let
  xenstored run out of memory (XSA-326)
  xsa326-01.patch
  xsa326-02.patch
  xsa326-03.patch
  xsa326-04.patch
  xsa326-05.patch
  xsa326-06.patch
  xsa326-07.patch
  xsa326-08.patch
  xsa326-09.patch
  xsa326-10.patch
  xsa326-11.patch
  xsa326-12.patch
  xsa326-13.patch
  xsa326-14.patch
  xsa326-15.patch
  xsa326-16.patch
- bsc#1204485 - VUL-0: CVE-2022-42309: xen: Xenstore: Guests can
  crash xenstored (XSA-414)
  xsa414.patch
- bsc#1204487 - VUL-0: CVE-2022-42310: xen: Xenstore: Guests can
  create orphaned Xenstore nodes (XSA-415)
  xsa415.patch
- bsc#1204488 - VUL-0: CVE-2022-42319: xen: Xenstore: Guests can
  cause Xenstore to not free temporary memory (XSA-416)
  xsa416.patch
- bsc#1204489 - VUL-0: CVE-2022-42320: xen: Xenstore: Guests can
  get access to Xenstore nodes of deleted domains (XSA-417)
  xsa417.patch
- bsc#1204490 - VUL-0: CVE-2022-42321: xen: Xenstore: Guests can
  crash xenstored via exhausting the stack (XSA-418)
  xsa418-01.patch
  xsa418-02.patch
  xsa418-03.patch
  xsa418-04.patch
  xsa418-05.patch
  xsa418-06.patch
  xsa418-07.patch
- bsc#1204494 - VUL-0: CVE-2022-42322,CVE-2022-42323: xen:
  Xenstore: cooperating guests can create arbitrary numbers of
  nodes (XSA-419)
  xsa419-01.patch
  xsa419-02.patch
  xsa419-03.patch
- bsc#1204496 - VUL-0: CVE-2022-42325,CVE-2022-42326: xen:
  Xenstore: Guests can create arbitray number of nodes via
  transactions (XSA-421)
  xsa421-01.patch
  xsa421-02.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1666699200">- bsc#1203806 - VUL-0: CVE-2022-33746: xen: P2M pool freeing may
  take excessively long (XSA-410)
  63455f82-Arm-P2M-prevent-adding-mapping-when-dying.patch
  63455fa8-Arm-P2M-preempt-when-freeing-intermediate.patch
  63455fc3-x86-p2m_teardown-allow-skip-root-pt-removal.patch
  63455fe4-x86-HAP-monitor-table-error-handling.patch
  63456000-x86-tolerate-sh_set_toplevel_shadow-failure.patch
  6345601d-x86-tolerate-shadow_prealloc-failure.patch
  6345603a-x86-P2M-refuse-new-alloc-for-dying.patch
  63456057-x86-P2M-truly-free-paging-pool-for-dying.patch
  63456075-x86-P2M-free-paging-pool-preemptively.patch
  63456090-x86-p2m_teardown-preemption.patch
- bcs#1203804 - VUL-0: CVE-2022-33747: xen: unbounded memory consumption
  for 2nd-level page tables on ARM systems (XSA-409)
  63456175-libxl-per-arch-extra-default-paging-memory.patch
  63456177-Arm-construct-P2M-pool-for-guests.patch
  6345617a-Arm-XEN_DOMCTL_shadow_op.patch
  6345617c-Arm-take-P2M-pages-P2M-pool.patch
- bsc#1203807 - VUL-0: CVE-2022-33748: xen: lock order inversion in
  transitive grant copy handling (XSA-411)
  634561aa-gnttab-locking-on-transitive-copy-error-path.patch
- Upstream bug fixes (bsc#1027519)
  6306185f-x86-XSTATE-CPUID-subleaf-1-EBX.patch
  631b5ba6-gnttab-acquire-resource-vaddrs.patch
  634561f1-x86emul-respect-NSCB.patch
  6346e404-VMX-correct-error-handling-in-vmx_create_vmcs.patch
  6351095c-Arm-rework-p2m_init.patch
  6351096a-Arm-P2M-populate-pages-for-GICv2-mapping.patch
  635274c0-EFI-dont-convert-runtime-mem-to-RAM.patch
  635665fb-sched-fix-restore_vcpu_affinity.patch
  63569723-x86-shadow-replace-bogus-assertions.patch
- Drop patches replaced by upstream versions:
  xsa410-01.patch
  xsa410-02.patch
  xsa410-03.patch
  xsa410-04.patch
  xsa410-05.patch
  xsa410-06.patch
  xsa410-07.patch
  xsa410-08.patch
  xsa410-09.patch
  xsa410-10.patch
  xsa411.patch</changelog>
  <changelog author="carnold@suse.com" date="1666958400">- bsc#1193923 - VUL-1: xen: Frontends vulnerable to backends
  (XSA-376)
  61dd5f64-limit-support-statement-for-Linux-and-Windows-frontends.patch</changelog>
  <changelog author="carnold@suse.com" date="1668081600">- bsc#1205209 - VUL-0: CVE-2022-23824: xen: x86: Multiple
  speculative security issues (XSA-422)
  636a9130-x86-spec-ctrl-Enumeration-for-IBPB_RET.patch
  636a9130-x86-spec-ctrl-Mitigate-IBPB-not-flushing-the-RSB-RAS.patch</changelog>
  <changelog author="carnold@suse.com" date="1671451200">- Update to Xen 4.16.3 bug fix release (bsc#1027519)
  xen-4.16.3-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Drop patches contained in new tarball
  62fde97e-tools-libxl-Replace-deprecated-soundhw-on-QEMU-command-line.patch
  6306185f-x86-XSTATE-CPUID-subleaf-1-EBX.patch
  631b5ba6-gnttab-acquire-resource-vaddrs.patch
  63455f82-Arm-P2M-prevent-adding-mapping-when-dying.patch
  63455fa8-Arm-P2M-preempt-when-freeing-intermediate.patch
  63455fc3-x86-p2m_teardown-allow-skip-root-pt-removal.patch
  63455fe4-x86-HAP-monitor-table-error-handling.patch
  63456000-x86-tolerate-sh_set_toplevel_shadow-failure.patch
  6345601d-x86-tolerate-shadow_prealloc-failure.patch
  6345603a-x86-P2M-refuse-new-alloc-for-dying.patch
  63456057-x86-P2M-truly-free-paging-pool-for-dying.patch
  63456075-x86-P2M-free-paging-pool-preemptively.patch
  63456090-x86-p2m_teardown-preemption.patch
  63456175-libxl-per-arch-extra-default-paging-memory.patch
  63456177-Arm-construct-P2M-pool-for-guests.patch
  6345617a-Arm-XEN_DOMCTL_shadow_op.patch
  6345617c-Arm-take-P2M-pages-P2M-pool.patch
  634561aa-gnttab-locking-on-transitive-copy-error-path.patch
  634561f1-x86emul-respect-NSCB.patch
  6346e404-VMX-correct-error-handling-in-vmx_create_vmcs.patch
  6351095c-Arm-rework-p2m_init.patch
  6351096a-Arm-P2M-populate-pages-for-GICv2-mapping.patch
  635274c0-EFI-dont-convert-runtime-mem-to-RAM.patch
  635665fb-sched-fix-restore_vcpu_affinity.patch
  63569723-x86-shadow-replace-bogus-assertions.patch
  636a9130-x86-spec-ctrl-Enumeration-for-IBPB_RET.patch
  636a9130-x86-spec-ctrl-Mitigate-IBPB-not-flushing-the-RSB-RAS.patch
  xsa326-01.patch
  xsa326-02.patch
  xsa326-03.patch
  xsa326-04.patch
  xsa326-05.patch
  xsa326-06.patch
  xsa326-07.patch
  xsa326-08.patch
  xsa326-09.patch
  xsa326-10.patch
  xsa326-11.patch
  xsa326-12.patch
  xsa326-13.patch
  xsa326-14.patch
  xsa326-15.patch
  xsa326-16.patch
  xsa412.patch
  xsa414.patch
  xsa415.patch
  xsa416.patch
  xsa417.patch
  xsa418-01.patch
  xsa418-02.patch
  xsa418-03.patch
  xsa418-04.patch
  xsa418-05.patch
  xsa418-06.patch
  xsa418-07.patch
  xsa419-01.patch
  xsa419-02.patch
  xsa419-03.patch
  xsa421-01.patch
  xsa421-02.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1671537600">- Upstream bug fixes (bsc#1027519)
  63a03e28-x86-high-freq-TSC-overflow.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1675684800">- Upstream bug fixes (bsc#1027519)
  63c05478-VMX-calculate-model-specific-LBRs-once.patch
  63c05478-VMX-support-CPUs-without-model-specific-LBR.patch</changelog>
  <changelog author="carnold@suse.com" date="1675944000">- bsc#1205792 - Partner-L3: launch-xenstore error messages show in
  SLES15 SP4 xen kernel.
  63e4da00-dont-log-errors-when-trying-to-load-PVH-xenstore-stubdom.patch</changelog>
  <changelog author="carnold@suse.com" date="1676462400">- bsc#1208286 - VUL-0: CVE-2022-27672: xen: Cross-Thread Return
  Address Predictions (XSA-426)
  63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch</changelog>
  <changelog author="carnold@suse.com" date="1678190400">- bsc#1209017 - VUL-0: CVE-2022-42332: xen: x86 shadow plus
  log-dirty mode use-after-free (XSA-427)
  xsa427.patch
- bsc#1209018 - VUL-0: CVE-2022-42333,CVE-2022-42334: xen: x86/HVM
  pinned cache attributes mis-handling (XSA-428)
  xsa428-1.patch
  xsa428-2.patch
- bsc#1209019 - VUL-0: CVE-2022-42331: xen: x86: speculative
  vulnerability in 32bit SYSCALL path (XSA-429)
  xsa429.patch</changelog>
  <changelog author="ohering@suse.de" date="1678968000">- bsc#1209245 - fix host-assisted kexec/kdump for HVM domUs
  libxl.fix-guest-kexec-skip-cpuid-policy.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1679659200">- Upstream bug fixes (bsc#1027519)
  63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch
  63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch
  63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch
  63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch
  641041e8-VT-d-constrain-IGD-check.patch
  6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch
- Use "proper" upstream backports:
  64199e0c-x86-shadow-account-for-log-dirty-mode.patch
  64199e0d-x86-HVM-bound-number-of-pca-regions.patch
  64199e0e-x86-HVM-serialize-pca-list-manipulation.patch
  64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch
- ... in place of:
  xsa427.patch
  xsa428-1.patch
  xsa428-2.patch
  xsa429.patch</changelog>
  <changelog author="carnold@suse.com" date="1682596800">- Update to Xen 4.16.4 bug fix release (bsc#1027519)
  xen-4.16.4-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Drop patches contained in new tarball
  63a03e28-x86-high-freq-TSC-overflow.patch
  63c05478-VMX-calculate-model-specific-LBRs-once.patch
  63c05478-VMX-support-CPUs-without-model-specific-LBR.patch
  63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch
  63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch
  63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch
  63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch
  63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch
  641041e8-VT-d-constrain-IGD-check.patch
  6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch
  64199e0c-x86-shadow-account-for-log-dirty-mode.patch
  64199e0d-x86-HVM-bound-number-of-pca-regions.patch
  64199e0e-x86-HVM-serialize-pca-list-manipulation.patch
  64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch
  libxl.fix-guest-kexec-skip-cpuid-policy.patch</changelog>
  <changelog author="carnold@suse.com" date="1683201600">- bsc#1209237 - xen-syms doesn't contain debug-info
  643e3810-CONFIG_DEBUG_INFO-no-EXPERT.patch
  6447a8fd-x86-EFI-permit-crash-dump-analysis.patch</changelog>
</package>
<package pkgid="4dea380890b9958efb875c1dd5022eb83e558aac21984f745af1419e0d527ac6" name="xen-libs" arch="x86_64">
  <version epoch="0" ver="4.16.3_06" rel="150400.4.25.1"/>
  <changelog author="schubi@suse.com" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="carnold@suse.com" date="1657627200">- bsc#1201394 - VUL-0: CVE-2022-33745: xen: insufficient TLB flush
  for x86 PV guests in shadow mode (XSA-408)
  xsa408.patch
- Fix gcc13 compilation error
  62c56cc0-libxc-fix-compilation-error-with-gcc13.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1657713600">- bsc#1199965 - VUL-0: CVE-2022-26362: xen: Race condition
  in typeref acquisition
  62a1e594-x86-clean-up-_get_page_type.patch
  62a1e5b0-x86-ABAC-race-in-_get_page_type.patch
- bsc#1199966 - VUL-0: CVE-2022-26363,CVE-2022-26364: xen:
  Insufficient care with non-coherent mappings
  62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch
  62a1e5f0-x86-dont-change-cacheability-of-directmap.patch
  62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch
  62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch
  62a1e649-x86-track-and-flush-non-coherent.patch
- bsc#1200549 VUL-0: CVE-2022-21123,CVE-2022-21125,CVE-2022-21166:
  xen: x86: MMIO Stale Data vulnerabilities (XSA-404)
  62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch
  62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch
  62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch
- bsc#1201469 - VUL-0: CVE-2022-23816,CVE-2022-23825,CVE-2022-29900:
  xen: retbleed - arbitrary speculative code execution with return
  instructions (XSA-407)
  62cc31ed-x86-honour-spec-ctrl-0-for-unpriv-mmio.patch
  62cc31ee-cmdline-extend-parse_boolean.patch
  62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch
  62cd91d0-x86-spec-ctrl-rework-context-switching.patch
  62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch
  62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch
  62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch
  62cd91d5-x86-cpuid-BTC_NO-enum.patch
  62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch
  62cd91d7-x86-spec-ctrl-mitigate-Branch-Type-Confusion.patch
- Upstream bug fixes (bsc#1027519)
  62a99614-IOMMU-x86-gcc12.patch
  62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch
  62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch
- Drop patches replaced by upstream versions
  xsa401-1.patch
  xsa401-2.patch
  xsa402-1.patch
  xsa402-2.patch
  xsa402-3.patch
  xsa402-4.patch
  xsa402-5.patch</changelog>
  <changelog author="carnold@suse.com" date="1657713601">- Added --disable-pvshim when running configure in xen.spec.
  We have never shipped the shim and don't need to build it.</changelog>
  <changelog author="ohering@suse.de" date="1659009600">- bsc#1167608, bsc#1201631 - fix built-in default of max_event_channels
  A previous change to the built-in default had a logic error,
  effectively restoring the upstream limit of 1023 channels per domU.
  Fix the logic to calculate the default based on the number of vcpus.
  adjust libxl.max_event_channels.patch</changelog>
  <changelog author="carnold@suse.com" date="1660824000">- Update to Xen 4.16.2 bug fix release (bsc#1027519)
  xen-4.16.2-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Drop patches contained in new tarball
  625fca42-VT-d-reserved-CAP-ND.patch
  626f7ee8-x86-MSR-handle-P5-MC-reads.patch
  627549d6-IO-shutdown-race.patch
  62a1e594-x86-clean-up-_get_page_type.patch
  62a1e5b0-x86-ABAC-race-in-_get_page_type.patch
  62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch
  62a1e5f0-x86-dont-change-cacheability-of-directmap.patch
  62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch
  62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch
  62a1e649-x86-track-and-flush-non-coherent.patch
  62a99614-IOMMU-x86-gcc12.patch
  62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch
  62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch
  62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch
  62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch
  62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch
  62c56cc0-libxc-fix-compilation-error-with-gcc13.patch
  62cc31ed-x86-honour-spec-ctrl-0-for-unpriv-mmio.patch
  62cc31ee-cmdline-extend-parse_boolean.patch
  62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch
  62cd91d0-x86-spec-ctrl-rework-context-switching.patch
  62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch
  62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch
  62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch
  62cd91d5-x86-cpuid-BTC_NO-enum.patch
  62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch
  62cd91d7-x86-spec-ctrl-mitigate-Branch-Type-Confusion.patch
  xsa408.patch</changelog>
  <changelog author="carnold@suse.com" date="1661256000">- Things are compiling fine now with gcc12.
  Drop gcc12-fixes.patch</changelog>
  <changelog author="carnold@suse.com" date="1661774400">- bsc#1201994 - Xen DomU unable to emulate audio device
  62fde97e-tools-libxl-Replace-deprecated-soundhw-on-QEMU-command-line.patch</changelog>
  <changelog author="carnold@suse.com" date="1664366400">- bsc#1203806 - VUL-0: CVE-2022-33746: xen: P2M pool freeing may
  take excessively long (XSA-410)
  xsa410-01.patch
  xsa410-02.patch
  xsa410-03.patch
  xsa410-04.patch
  xsa410-05.patch
  xsa410-06.patch
  xsa410-07.patch
  xsa410-08.patch
  xsa410-09.patch
  xsa410-10.patch
- bsc#1203807 - VUL-0: CVE-2022-33748: xen: lock order inversion in
  transitive grant copy handling (XSA-411)
  xsa411.patch</changelog>
  <changelog author="carnold@suse.com" date="1666180800">- bsc#1204483 - VUL-0: CVE-2022-42327: xen: x86: unintended memory
  sharing between guests (XSA-412)
  xsa412.patch</changelog>
  <changelog author="carnold@suse.com" date="1666180801">- bsc#1204482 - VUL-0: CVE-2022-42311, CVE-2022-42312,
  CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316,
  CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let
  xenstored run out of memory (XSA-326)
  xsa326-01.patch
  xsa326-02.patch
  xsa326-03.patch
  xsa326-04.patch
  xsa326-05.patch
  xsa326-06.patch
  xsa326-07.patch
  xsa326-08.patch
  xsa326-09.patch
  xsa326-10.patch
  xsa326-11.patch
  xsa326-12.patch
  xsa326-13.patch
  xsa326-14.patch
  xsa326-15.patch
  xsa326-16.patch
- bsc#1204485 - VUL-0: CVE-2022-42309: xen: Xenstore: Guests can
  crash xenstored (XSA-414)
  xsa414.patch
- bsc#1204487 - VUL-0: CVE-2022-42310: xen: Xenstore: Guests can
  create orphaned Xenstore nodes (XSA-415)
  xsa415.patch
- bsc#1204488 - VUL-0: CVE-2022-42319: xen: Xenstore: Guests can
  cause Xenstore to not free temporary memory (XSA-416)
  xsa416.patch
- bsc#1204489 - VUL-0: CVE-2022-42320: xen: Xenstore: Guests can
  get access to Xenstore nodes of deleted domains (XSA-417)
  xsa417.patch
- bsc#1204490 - VUL-0: CVE-2022-42321: xen: Xenstore: Guests can
  crash xenstored via exhausting the stack (XSA-418)
  xsa418-01.patch
  xsa418-02.patch
  xsa418-03.patch
  xsa418-04.patch
  xsa418-05.patch
  xsa418-06.patch
  xsa418-07.patch
- bsc#1204494 - VUL-0: CVE-2022-42322,CVE-2022-42323: xen:
  Xenstore: cooperating guests can create arbitrary numbers of
  nodes (XSA-419)
  xsa419-01.patch
  xsa419-02.patch
  xsa419-03.patch
- bsc#1204496 - VUL-0: CVE-2022-42325,CVE-2022-42326: xen:
  Xenstore: Guests can create arbitray number of nodes via
  transactions (XSA-421)
  xsa421-01.patch
  xsa421-02.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1666699200">- bsc#1203806 - VUL-0: CVE-2022-33746: xen: P2M pool freeing may
  take excessively long (XSA-410)
  63455f82-Arm-P2M-prevent-adding-mapping-when-dying.patch
  63455fa8-Arm-P2M-preempt-when-freeing-intermediate.patch
  63455fc3-x86-p2m_teardown-allow-skip-root-pt-removal.patch
  63455fe4-x86-HAP-monitor-table-error-handling.patch
  63456000-x86-tolerate-sh_set_toplevel_shadow-failure.patch
  6345601d-x86-tolerate-shadow_prealloc-failure.patch
  6345603a-x86-P2M-refuse-new-alloc-for-dying.patch
  63456057-x86-P2M-truly-free-paging-pool-for-dying.patch
  63456075-x86-P2M-free-paging-pool-preemptively.patch
  63456090-x86-p2m_teardown-preemption.patch
- bcs#1203804 - VUL-0: CVE-2022-33747: xen: unbounded memory consumption
  for 2nd-level page tables on ARM systems (XSA-409)
  63456175-libxl-per-arch-extra-default-paging-memory.patch
  63456177-Arm-construct-P2M-pool-for-guests.patch
  6345617a-Arm-XEN_DOMCTL_shadow_op.patch
  6345617c-Arm-take-P2M-pages-P2M-pool.patch
- bsc#1203807 - VUL-0: CVE-2022-33748: xen: lock order inversion in
  transitive grant copy handling (XSA-411)
  634561aa-gnttab-locking-on-transitive-copy-error-path.patch
- Upstream bug fixes (bsc#1027519)
  6306185f-x86-XSTATE-CPUID-subleaf-1-EBX.patch
  631b5ba6-gnttab-acquire-resource-vaddrs.patch
  634561f1-x86emul-respect-NSCB.patch
  6346e404-VMX-correct-error-handling-in-vmx_create_vmcs.patch
  6351095c-Arm-rework-p2m_init.patch
  6351096a-Arm-P2M-populate-pages-for-GICv2-mapping.patch
  635274c0-EFI-dont-convert-runtime-mem-to-RAM.patch
  635665fb-sched-fix-restore_vcpu_affinity.patch
  63569723-x86-shadow-replace-bogus-assertions.patch
- Drop patches replaced by upstream versions:
  xsa410-01.patch
  xsa410-02.patch
  xsa410-03.patch
  xsa410-04.patch
  xsa410-05.patch
  xsa410-06.patch
  xsa410-07.patch
  xsa410-08.patch
  xsa410-09.patch
  xsa410-10.patch
  xsa411.patch</changelog>
  <changelog author="carnold@suse.com" date="1666958400">- bsc#1193923 - VUL-1: xen: Frontends vulnerable to backends
  (XSA-376)
  61dd5f64-limit-support-statement-for-Linux-and-Windows-frontends.patch</changelog>
  <changelog author="carnold@suse.com" date="1668081600">- bsc#1205209 - VUL-0: CVE-2022-23824: xen: x86: Multiple
  speculative security issues (XSA-422)
  636a9130-x86-spec-ctrl-Enumeration-for-IBPB_RET.patch
  636a9130-x86-spec-ctrl-Mitigate-IBPB-not-flushing-the-RSB-RAS.patch</changelog>
  <changelog author="carnold@suse.com" date="1671451200">- Update to Xen 4.16.3 bug fix release (bsc#1027519)
  xen-4.16.3-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Drop patches contained in new tarball
  62fde97e-tools-libxl-Replace-deprecated-soundhw-on-QEMU-command-line.patch
  6306185f-x86-XSTATE-CPUID-subleaf-1-EBX.patch
  631b5ba6-gnttab-acquire-resource-vaddrs.patch
  63455f82-Arm-P2M-prevent-adding-mapping-when-dying.patch
  63455fa8-Arm-P2M-preempt-when-freeing-intermediate.patch
  63455fc3-x86-p2m_teardown-allow-skip-root-pt-removal.patch
  63455fe4-x86-HAP-monitor-table-error-handling.patch
  63456000-x86-tolerate-sh_set_toplevel_shadow-failure.patch
  6345601d-x86-tolerate-shadow_prealloc-failure.patch
  6345603a-x86-P2M-refuse-new-alloc-for-dying.patch
  63456057-x86-P2M-truly-free-paging-pool-for-dying.patch
  63456075-x86-P2M-free-paging-pool-preemptively.patch
  63456090-x86-p2m_teardown-preemption.patch
  63456175-libxl-per-arch-extra-default-paging-memory.patch
  63456177-Arm-construct-P2M-pool-for-guests.patch
  6345617a-Arm-XEN_DOMCTL_shadow_op.patch
  6345617c-Arm-take-P2M-pages-P2M-pool.patch
  634561aa-gnttab-locking-on-transitive-copy-error-path.patch
  634561f1-x86emul-respect-NSCB.patch
  6346e404-VMX-correct-error-handling-in-vmx_create_vmcs.patch
  6351095c-Arm-rework-p2m_init.patch
  6351096a-Arm-P2M-populate-pages-for-GICv2-mapping.patch
  635274c0-EFI-dont-convert-runtime-mem-to-RAM.patch
  635665fb-sched-fix-restore_vcpu_affinity.patch
  63569723-x86-shadow-replace-bogus-assertions.patch
  636a9130-x86-spec-ctrl-Enumeration-for-IBPB_RET.patch
  636a9130-x86-spec-ctrl-Mitigate-IBPB-not-flushing-the-RSB-RAS.patch
  xsa326-01.patch
  xsa326-02.patch
  xsa326-03.patch
  xsa326-04.patch
  xsa326-05.patch
  xsa326-06.patch
  xsa326-07.patch
  xsa326-08.patch
  xsa326-09.patch
  xsa326-10.patch
  xsa326-11.patch
  xsa326-12.patch
  xsa326-13.patch
  xsa326-14.patch
  xsa326-15.patch
  xsa326-16.patch
  xsa412.patch
  xsa414.patch
  xsa415.patch
  xsa416.patch
  xsa417.patch
  xsa418-01.patch
  xsa418-02.patch
  xsa418-03.patch
  xsa418-04.patch
  xsa418-05.patch
  xsa418-06.patch
  xsa418-07.patch
  xsa419-01.patch
  xsa419-02.patch
  xsa419-03.patch
  xsa421-01.patch
  xsa421-02.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1671537600">- Upstream bug fixes (bsc#1027519)
  63a03e28-x86-high-freq-TSC-overflow.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1675684800">- Upstream bug fixes (bsc#1027519)
  63c05478-VMX-calculate-model-specific-LBRs-once.patch
  63c05478-VMX-support-CPUs-without-model-specific-LBR.patch</changelog>
  <changelog author="carnold@suse.com" date="1675944000">- bsc#1205792 - Partner-L3: launch-xenstore error messages show in
  SLES15 SP4 xen kernel.
  63e4da00-dont-log-errors-when-trying-to-load-PVH-xenstore-stubdom.patch</changelog>
  <changelog author="carnold@suse.com" date="1676462400">- bsc#1208286 - VUL-0: CVE-2022-27672: xen: Cross-Thread Return
  Address Predictions (XSA-426)
  63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch</changelog>
  <changelog author="carnold@suse.com" date="1678190400">- bsc#1209017 - VUL-0: CVE-2022-42332: xen: x86 shadow plus
  log-dirty mode use-after-free (XSA-427)
  xsa427.patch
- bsc#1209018 - VUL-0: CVE-2022-42333,CVE-2022-42334: xen: x86/HVM
  pinned cache attributes mis-handling (XSA-428)
  xsa428-1.patch
  xsa428-2.patch
- bsc#1209019 - VUL-0: CVE-2022-42331: xen: x86: speculative
  vulnerability in 32bit SYSCALL path (XSA-429)
  xsa429.patch</changelog>
</package>
<package pkgid="c6f7152d8c373dbc1f40776c9e61c1f424032af3b344a814cdb00e08efaa3495" name="xen-libs" arch="x86_64">
  <version epoch="0" ver="4.16.4_02" rel="150400.4.28.1"/>
  <changelog author="ohering@suse.de" date="1659009600">- bsc#1167608, bsc#1201631 - fix built-in default of max_event_channels
  A previous change to the built-in default had a logic error,
  effectively restoring the upstream limit of 1023 channels per domU.
  Fix the logic to calculate the default based on the number of vcpus.
  adjust libxl.max_event_channels.patch</changelog>
  <changelog author="carnold@suse.com" date="1660824000">- Update to Xen 4.16.2 bug fix release (bsc#1027519)
  xen-4.16.2-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Drop patches contained in new tarball
  625fca42-VT-d-reserved-CAP-ND.patch
  626f7ee8-x86-MSR-handle-P5-MC-reads.patch
  627549d6-IO-shutdown-race.patch
  62a1e594-x86-clean-up-_get_page_type.patch
  62a1e5b0-x86-ABAC-race-in-_get_page_type.patch
  62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch
  62a1e5f0-x86-dont-change-cacheability-of-directmap.patch
  62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch
  62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch
  62a1e649-x86-track-and-flush-non-coherent.patch
  62a99614-IOMMU-x86-gcc12.patch
  62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch
  62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch
  62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch
  62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch
  62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch
  62c56cc0-libxc-fix-compilation-error-with-gcc13.patch
  62cc31ed-x86-honour-spec-ctrl-0-for-unpriv-mmio.patch
  62cc31ee-cmdline-extend-parse_boolean.patch
  62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch
  62cd91d0-x86-spec-ctrl-rework-context-switching.patch
  62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch
  62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch
  62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch
  62cd91d5-x86-cpuid-BTC_NO-enum.patch
  62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch
  62cd91d7-x86-spec-ctrl-mitigate-Branch-Type-Confusion.patch
  xsa408.patch</changelog>
  <changelog author="carnold@suse.com" date="1661256000">- Things are compiling fine now with gcc12.
  Drop gcc12-fixes.patch</changelog>
  <changelog author="carnold@suse.com" date="1661774400">- bsc#1201994 - Xen DomU unable to emulate audio device
  62fde97e-tools-libxl-Replace-deprecated-soundhw-on-QEMU-command-line.patch</changelog>
  <changelog author="carnold@suse.com" date="1664366400">- bsc#1203806 - VUL-0: CVE-2022-33746: xen: P2M pool freeing may
  take excessively long (XSA-410)
  xsa410-01.patch
  xsa410-02.patch
  xsa410-03.patch
  xsa410-04.patch
  xsa410-05.patch
  xsa410-06.patch
  xsa410-07.patch
  xsa410-08.patch
  xsa410-09.patch
  xsa410-10.patch
- bsc#1203807 - VUL-0: CVE-2022-33748: xen: lock order inversion in
  transitive grant copy handling (XSA-411)
  xsa411.patch</changelog>
  <changelog author="carnold@suse.com" date="1666180800">- bsc#1204483 - VUL-0: CVE-2022-42327: xen: x86: unintended memory
  sharing between guests (XSA-412)
  xsa412.patch</changelog>
  <changelog author="carnold@suse.com" date="1666180801">- bsc#1204482 - VUL-0: CVE-2022-42311, CVE-2022-42312,
  CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316,
  CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let
  xenstored run out of memory (XSA-326)
  xsa326-01.patch
  xsa326-02.patch
  xsa326-03.patch
  xsa326-04.patch
  xsa326-05.patch
  xsa326-06.patch
  xsa326-07.patch
  xsa326-08.patch
  xsa326-09.patch
  xsa326-10.patch
  xsa326-11.patch
  xsa326-12.patch
  xsa326-13.patch
  xsa326-14.patch
  xsa326-15.patch
  xsa326-16.patch
- bsc#1204485 - VUL-0: CVE-2022-42309: xen: Xenstore: Guests can
  crash xenstored (XSA-414)
  xsa414.patch
- bsc#1204487 - VUL-0: CVE-2022-42310: xen: Xenstore: Guests can
  create orphaned Xenstore nodes (XSA-415)
  xsa415.patch
- bsc#1204488 - VUL-0: CVE-2022-42319: xen: Xenstore: Guests can
  cause Xenstore to not free temporary memory (XSA-416)
  xsa416.patch
- bsc#1204489 - VUL-0: CVE-2022-42320: xen: Xenstore: Guests can
  get access to Xenstore nodes of deleted domains (XSA-417)
  xsa417.patch
- bsc#1204490 - VUL-0: CVE-2022-42321: xen: Xenstore: Guests can
  crash xenstored via exhausting the stack (XSA-418)
  xsa418-01.patch
  xsa418-02.patch
  xsa418-03.patch
  xsa418-04.patch
  xsa418-05.patch
  xsa418-06.patch
  xsa418-07.patch
- bsc#1204494 - VUL-0: CVE-2022-42322,CVE-2022-42323: xen:
  Xenstore: cooperating guests can create arbitrary numbers of
  nodes (XSA-419)
  xsa419-01.patch
  xsa419-02.patch
  xsa419-03.patch
- bsc#1204496 - VUL-0: CVE-2022-42325,CVE-2022-42326: xen:
  Xenstore: Guests can create arbitray number of nodes via
  transactions (XSA-421)
  xsa421-01.patch
  xsa421-02.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1666699200">- bsc#1203806 - VUL-0: CVE-2022-33746: xen: P2M pool freeing may
  take excessively long (XSA-410)
  63455f82-Arm-P2M-prevent-adding-mapping-when-dying.patch
  63455fa8-Arm-P2M-preempt-when-freeing-intermediate.patch
  63455fc3-x86-p2m_teardown-allow-skip-root-pt-removal.patch
  63455fe4-x86-HAP-monitor-table-error-handling.patch
  63456000-x86-tolerate-sh_set_toplevel_shadow-failure.patch
  6345601d-x86-tolerate-shadow_prealloc-failure.patch
  6345603a-x86-P2M-refuse-new-alloc-for-dying.patch
  63456057-x86-P2M-truly-free-paging-pool-for-dying.patch
  63456075-x86-P2M-free-paging-pool-preemptively.patch
  63456090-x86-p2m_teardown-preemption.patch
- bcs#1203804 - VUL-0: CVE-2022-33747: xen: unbounded memory consumption
  for 2nd-level page tables on ARM systems (XSA-409)
  63456175-libxl-per-arch-extra-default-paging-memory.patch
  63456177-Arm-construct-P2M-pool-for-guests.patch
  6345617a-Arm-XEN_DOMCTL_shadow_op.patch
  6345617c-Arm-take-P2M-pages-P2M-pool.patch
- bsc#1203807 - VUL-0: CVE-2022-33748: xen: lock order inversion in
  transitive grant copy handling (XSA-411)
  634561aa-gnttab-locking-on-transitive-copy-error-path.patch
- Upstream bug fixes (bsc#1027519)
  6306185f-x86-XSTATE-CPUID-subleaf-1-EBX.patch
  631b5ba6-gnttab-acquire-resource-vaddrs.patch
  634561f1-x86emul-respect-NSCB.patch
  6346e404-VMX-correct-error-handling-in-vmx_create_vmcs.patch
  6351095c-Arm-rework-p2m_init.patch
  6351096a-Arm-P2M-populate-pages-for-GICv2-mapping.patch
  635274c0-EFI-dont-convert-runtime-mem-to-RAM.patch
  635665fb-sched-fix-restore_vcpu_affinity.patch
  63569723-x86-shadow-replace-bogus-assertions.patch
- Drop patches replaced by upstream versions:
  xsa410-01.patch
  xsa410-02.patch
  xsa410-03.patch
  xsa410-04.patch
  xsa410-05.patch
  xsa410-06.patch
  xsa410-07.patch
  xsa410-08.patch
  xsa410-09.patch
  xsa410-10.patch
  xsa411.patch</changelog>
  <changelog author="carnold@suse.com" date="1666958400">- bsc#1193923 - VUL-1: xen: Frontends vulnerable to backends
  (XSA-376)
  61dd5f64-limit-support-statement-for-Linux-and-Windows-frontends.patch</changelog>
  <changelog author="carnold@suse.com" date="1668081600">- bsc#1205209 - VUL-0: CVE-2022-23824: xen: x86: Multiple
  speculative security issues (XSA-422)
  636a9130-x86-spec-ctrl-Enumeration-for-IBPB_RET.patch
  636a9130-x86-spec-ctrl-Mitigate-IBPB-not-flushing-the-RSB-RAS.patch</changelog>
  <changelog author="carnold@suse.com" date="1671451200">- Update to Xen 4.16.3 bug fix release (bsc#1027519)
  xen-4.16.3-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Drop patches contained in new tarball
  62fde97e-tools-libxl-Replace-deprecated-soundhw-on-QEMU-command-line.patch
  6306185f-x86-XSTATE-CPUID-subleaf-1-EBX.patch
  631b5ba6-gnttab-acquire-resource-vaddrs.patch
  63455f82-Arm-P2M-prevent-adding-mapping-when-dying.patch
  63455fa8-Arm-P2M-preempt-when-freeing-intermediate.patch
  63455fc3-x86-p2m_teardown-allow-skip-root-pt-removal.patch
  63455fe4-x86-HAP-monitor-table-error-handling.patch
  63456000-x86-tolerate-sh_set_toplevel_shadow-failure.patch
  6345601d-x86-tolerate-shadow_prealloc-failure.patch
  6345603a-x86-P2M-refuse-new-alloc-for-dying.patch
  63456057-x86-P2M-truly-free-paging-pool-for-dying.patch
  63456075-x86-P2M-free-paging-pool-preemptively.patch
  63456090-x86-p2m_teardown-preemption.patch
  63456175-libxl-per-arch-extra-default-paging-memory.patch
  63456177-Arm-construct-P2M-pool-for-guests.patch
  6345617a-Arm-XEN_DOMCTL_shadow_op.patch
  6345617c-Arm-take-P2M-pages-P2M-pool.patch
  634561aa-gnttab-locking-on-transitive-copy-error-path.patch
  634561f1-x86emul-respect-NSCB.patch
  6346e404-VMX-correct-error-handling-in-vmx_create_vmcs.patch
  6351095c-Arm-rework-p2m_init.patch
  6351096a-Arm-P2M-populate-pages-for-GICv2-mapping.patch
  635274c0-EFI-dont-convert-runtime-mem-to-RAM.patch
  635665fb-sched-fix-restore_vcpu_affinity.patch
  63569723-x86-shadow-replace-bogus-assertions.patch
  636a9130-x86-spec-ctrl-Enumeration-for-IBPB_RET.patch
  636a9130-x86-spec-ctrl-Mitigate-IBPB-not-flushing-the-RSB-RAS.patch
  xsa326-01.patch
  xsa326-02.patch
  xsa326-03.patch
  xsa326-04.patch
  xsa326-05.patch
  xsa326-06.patch
  xsa326-07.patch
  xsa326-08.patch
  xsa326-09.patch
  xsa326-10.patch
  xsa326-11.patch
  xsa326-12.patch
  xsa326-13.patch
  xsa326-14.patch
  xsa326-15.patch
  xsa326-16.patch
  xsa412.patch
  xsa414.patch
  xsa415.patch
  xsa416.patch
  xsa417.patch
  xsa418-01.patch
  xsa418-02.patch
  xsa418-03.patch
  xsa418-04.patch
  xsa418-05.patch
  xsa418-06.patch
  xsa418-07.patch
  xsa419-01.patch
  xsa419-02.patch
  xsa419-03.patch
  xsa421-01.patch
  xsa421-02.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1671537600">- Upstream bug fixes (bsc#1027519)
  63a03e28-x86-high-freq-TSC-overflow.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1675684800">- Upstream bug fixes (bsc#1027519)
  63c05478-VMX-calculate-model-specific-LBRs-once.patch
  63c05478-VMX-support-CPUs-without-model-specific-LBR.patch</changelog>
  <changelog author="carnold@suse.com" date="1675944000">- bsc#1205792 - Partner-L3: launch-xenstore error messages show in
  SLES15 SP4 xen kernel.
  63e4da00-dont-log-errors-when-trying-to-load-PVH-xenstore-stubdom.patch</changelog>
  <changelog author="carnold@suse.com" date="1676462400">- bsc#1208286 - VUL-0: CVE-2022-27672: xen: Cross-Thread Return
  Address Predictions (XSA-426)
  63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch</changelog>
  <changelog author="carnold@suse.com" date="1678190400">- bsc#1209017 - VUL-0: CVE-2022-42332: xen: x86 shadow plus
  log-dirty mode use-after-free (XSA-427)
  xsa427.patch
- bsc#1209018 - VUL-0: CVE-2022-42333,CVE-2022-42334: xen: x86/HVM
  pinned cache attributes mis-handling (XSA-428)
  xsa428-1.patch
  xsa428-2.patch
- bsc#1209019 - VUL-0: CVE-2022-42331: xen: x86: speculative
  vulnerability in 32bit SYSCALL path (XSA-429)
  xsa429.patch</changelog>
  <changelog author="ohering@suse.de" date="1678968000">- bsc#1209245 - fix host-assisted kexec/kdump for HVM domUs
  libxl.fix-guest-kexec-skip-cpuid-policy.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1679659200">- Upstream bug fixes (bsc#1027519)
  63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch
  63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch
  63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch
  63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch
  641041e8-VT-d-constrain-IGD-check.patch
  6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch
- Use "proper" upstream backports:
  64199e0c-x86-shadow-account-for-log-dirty-mode.patch
  64199e0d-x86-HVM-bound-number-of-pca-regions.patch
  64199e0e-x86-HVM-serialize-pca-list-manipulation.patch
  64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch
- ... in place of:
  xsa427.patch
  xsa428-1.patch
  xsa428-2.patch
  xsa429.patch</changelog>
  <changelog author="carnold@suse.com" date="1682596800">- Update to Xen 4.16.4 bug fix release (bsc#1027519)
  xen-4.16.4-testing-src.tar.bz2
  * No upstream changelog found in sources or webpage
- Drop patches contained in new tarball
  63a03e28-x86-high-freq-TSC-overflow.patch
  63c05478-VMX-calculate-model-specific-LBRs-once.patch
  63c05478-VMX-support-CPUs-without-model-specific-LBR.patch
  63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch
  63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch
  63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch
  63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch
  63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch
  641041e8-VT-d-constrain-IGD-check.patch
  6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch
  64199e0c-x86-shadow-account-for-log-dirty-mode.patch
  64199e0d-x86-HVM-bound-number-of-pca-regions.patch
  64199e0e-x86-HVM-serialize-pca-list-manipulation.patch
  64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch
  libxl.fix-guest-kexec-skip-cpuid-policy.patch</changelog>
  <changelog author="carnold@suse.com" date="1683201600">- bsc#1209237 - xen-syms doesn't contain debug-info
  643e3810-CONFIG_DEBUG_INFO-no-EXPERT.patch
  6447a8fd-x86-EFI-permit-crash-dump-analysis.patch</changelog>
</package>
<package pkgid="bed6c3aadc6f5340612bb9e4673f2c8b2a6f42b78ad92e1a2700a90a5b822fdb" name="xxd" arch="aarch64">
  <version epoch="0" ver="9.0.1443" rel="150000.5.40.1"/>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
</package>
<package pkgid="fc425aebd76e62943958e013d47ece72252caa5b8c822ebc223c559161ad7822" name="xxd" arch="ppc64le">
  <version epoch="0" ver="9.0.1443" rel="150000.5.40.1"/>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
</package>
<package pkgid="68a92046227de72e0a1cc4e3beece9d277f736a08f53f53f6c550bcff6b814b8" name="xxd" arch="s390x">
  <version epoch="0" ver="9.0.1443" rel="150000.5.40.1"/>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
</package>
<package pkgid="b0ac0e4b4c827422a46fe9544e536e4df66ecb4cac96c227ee5e8efdf64337e8" name="xxd" arch="x86_64">
  <version epoch="0" ver="9.0.1443" rel="150000.5.40.1"/>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
</package>
<package pkgid="cf8fd9dec4cfe1d3c2b6017025a5acb3feb507ea7e472e2930574283f3685482" name="xxd" arch="aarch64">
  <version epoch="0" ver="9.0.1443" rel="150000.5.43.1"/>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Make xxd conflicting the previous vim packages</changelog>
</package>
<package pkgid="068dbbab4d8dfe73d8676c1caf38cad0f34e94412ccb31327058aa1a20b29914" name="xxd" arch="ppc64le">
  <version epoch="0" ver="9.0.1443" rel="150000.5.43.1"/>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Make xxd conflicting the previous vim packages</changelog>
</package>
<package pkgid="f20f5c00ac2f6bd7d59f6ff52aeb3ab5402bfae9f5dd76824eecff002ad8e83f" name="xxd" arch="s390x">
  <version epoch="0" ver="9.0.1443" rel="150000.5.43.1"/>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Make xxd conflicting the previous vim packages</changelog>
</package>
<package pkgid="406c7fc1adbe57a3f50f8f5a067d0ef668f9da280e4108fc69cd6055f453b5ab" name="xxd" arch="x86_64">
  <version epoch="0" ver="9.0.1443" rel="150000.5.43.1"/>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
  <changelog author="zbalogh@suse.com" date="1671451200">- Updated to version 9.0 with patch level 1040, fixes the following security problems
  * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742
  * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow
  * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free
  * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
  * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
  * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.814...v9.0.1040</changelog>
  <changelog author="zbalogh@suse.com" date="1674648000">- Updated to version 9.0 with patch level 1234, fixes the following security problems
  * Fixing bsc#1207396 VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225
  * Fixing bsc#1207162 VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
  * Fixing bsc#1206868 VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
  * Fixing bsc#1206867 VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
  * Fixing bsc#1206866 VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- refreshed vim-7.4-highlight_fstab.patch
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1040...v9.0.1234</changelog>
  <changelog author="zbalogh@suse.com" date="1678190400">- Updated to version 9.0 with patch level 1386, fixes the following security problems
  * Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
  * Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
  * Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
  * Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386</changelog>
  <changelog author="zbalogh@suse.com" date="1682596800">- Updated to version 9.0 with patch level 1443, fixes the following security problems
  * Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
  * Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
  * Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
  remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443</changelog>
  <changelog author="zbalogh@suse.com" date="1683633600">- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
  * Make xxd conflicting the previous vim packages</changelog>
</package>
<package pkgid="407af6df0e94df43625253579841a618855d24505b7656002ff0dc6eada2977d" name="zchunk" arch="src">
  <version epoch="0" ver="1.1.16" rel="150400.3.4.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
</package>
<package pkgid="9b383eab536ba0ff57263a3ac31a4a4d864cb9aa0fd5828196a70dfc4545606d" name="zlib" arch="src">
  <version epoch="0" ver="1.2.11" rel="150000.3.42.1"/>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
</package>
<package pkgid="7a3e8299eee5258d52c2084173e8760e3118632b7ab2de2cb6754d085225fd51" name="zlib" arch="src">
  <version epoch="0" ver="1.2.11" rel="150000.3.45.1"/>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683028800">- Fix deflateBound() before deflateInit(), bsc#1210593
  bsc1210593.patch</changelog>
</package>
<package pkgid="029f7271201b2c389c28caecbbd98b6255ca976a3097cf28a87c74a239874921" name="zlib-devel" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="150000.3.42.1"/>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
</package>
<package pkgid="91ba0d3bce874525df2e421e84dff069a3d7d909f3bbd64b75ddc5c2923f1260" name="zlib-devel" arch="s390x">
  <version epoch="0" ver="1.2.11" rel="150000.3.42.1"/>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
</package>
<package pkgid="67b0d70e779906af85e37ba79a1b779fc643aa2ec84dfd87e2f6b4c39fdb58bc" name="zlib-devel" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="150000.3.42.1"/>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
</package>
<package pkgid="8beb7763804c9a6c954c219b888c2897569f8b9fc0a6af69a644109371f37e24" name="zlib-devel" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="150000.3.45.1"/>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683028800">- Fix deflateBound() before deflateInit(), bsc#1210593
  bsc1210593.patch</changelog>
</package>
<package pkgid="75ed1646ff538f4a30a948b5694e840ebddc874cf1cf5adaf9cb6280bd03aa04" name="zlib-devel" arch="s390x">
  <version epoch="0" ver="1.2.11" rel="150000.3.45.1"/>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683028800">- Fix deflateBound() before deflateInit(), bsc#1210593
  bsc1210593.patch</changelog>
</package>
<package pkgid="2e7dad5eff808bd11f174b0aaa2bcd7dfd68805851d9f6e942ac6e3e22063f35" name="zlib-devel" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="150000.3.45.1"/>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683028800">- Fix deflateBound() before deflateInit(), bsc#1210593
  bsc1210593.patch</changelog>
</package>
<package pkgid="d4515174a4cf69c1476b61c09214e15afbaec97aa50bdc36ac28ba6f427bc9ef" name="zypper" arch="aarch64">
  <version epoch="0" ver="1.14.60" rel="150400.3.21.2"/>
  <changelog author="ma@suse.de" date="1606478400">- Avoid translated text in xml attributes ( fixes #361 )
- BuildRequires:  libzypp-devel &gt;= 17.25.3.
  Adapt to new LoadTestcase API.
- version 1.14.41</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
  <changelog author="ma@suse.de" date="1622635200">- Add hints to 'trust GPG key' prompt.
- Add report when receiving new package signing keys from a
  trusted repo (bsc#1184326)
- Added translation using Weblate (Kabyle)
- version 1.14.45</changelog>
  <changelog author="ma@suse.de" date="1623326400">- Link all executables with -pie (bsc#1186447)
- Tag PTF packages in the status column (bsc#1186503)
  Like retracted packages, a program temporary fix must be
  explicitly selected and will otherwise not be considered in
  dependency resolution.
- BuildRequires:  libzypp-devel &gt;= 17.26.1.
- version 1.14.46</changelog>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
</package>
<package pkgid="6b80df7345d2ab08f8d2300a3efa0b6413ef7e1ab786ac3ef28a4e3e09f15e9a" name="zypper" arch="s390x">
  <version epoch="0" ver="1.14.60" rel="150400.3.21.2"/>
  <changelog author="ma@suse.de" date="1606478400">- Avoid translated text in xml attributes ( fixes #361 )
- BuildRequires:  libzypp-devel &gt;= 17.25.3.
  Adapt to new LoadTestcase API.
- version 1.14.41</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
  <changelog author="ma@suse.de" date="1622635200">- Add hints to 'trust GPG key' prompt.
- Add report when receiving new package signing keys from a
  trusted repo (bsc#1184326)
- Added translation using Weblate (Kabyle)
- version 1.14.45</changelog>
  <changelog author="ma@suse.de" date="1623326400">- Link all executables with -pie (bsc#1186447)
- Tag PTF packages in the status column (bsc#1186503)
  Like retracted packages, a program temporary fix must be
  explicitly selected and will otherwise not be considered in
  dependency resolution.
- BuildRequires:  libzypp-devel &gt;= 17.26.1.
- version 1.14.46</changelog>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
</package>
<package pkgid="d3c736ac6009e9c9deae36a66366cb9a503e542bffd989f54990fcf2b378ebc2" name="zypper" arch="src">
  <version epoch="0" ver="1.14.60" rel="150400.3.21.2"/>
  <changelog author="ma@suse.de" date="1606478400">- Avoid translated text in xml attributes ( fixes #361 )
- BuildRequires:  libzypp-devel &gt;= 17.25.3.
  Adapt to new LoadTestcase API.
- version 1.14.41</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
  <changelog author="ma@suse.de" date="1622635200">- Add hints to 'trust GPG key' prompt.
- Add report when receiving new package signing keys from a
  trusted repo (bsc#1184326)
- Added translation using Weblate (Kabyle)
- version 1.14.45</changelog>
  <changelog author="ma@suse.de" date="1623326400">- Link all executables with -pie (bsc#1186447)
- Tag PTF packages in the status column (bsc#1186503)
  Like retracted packages, a program temporary fix must be
  explicitly selected and will otherwise not be considered in
  dependency resolution.
- BuildRequires:  libzypp-devel &gt;= 17.26.1.
- version 1.14.46</changelog>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
</package>
<package pkgid="142802545fdc23208712ff0fa9eaac7e58df40f3d53ef5c941ccbc22bede09cd" name="zypper" arch="x86_64">
  <version epoch="0" ver="1.14.60" rel="150400.3.21.2"/>
  <changelog author="ma@suse.de" date="1606478400">- Avoid translated text in xml attributes ( fixes #361 )
- BuildRequires:  libzypp-devel &gt;= 17.25.3.
  Adapt to new LoadTestcase API.
- version 1.14.41</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
  <changelog author="ma@suse.de" date="1622635200">- Add hints to 'trust GPG key' prompt.
- Add report when receiving new package signing keys from a
  trusted repo (bsc#1184326)
- Added translation using Weblate (Kabyle)
- version 1.14.45</changelog>
  <changelog author="ma@suse.de" date="1623326400">- Link all executables with -pie (bsc#1186447)
- Tag PTF packages in the status column (bsc#1186503)
  Like retracted packages, a program temporary fix must be
  explicitly selected and will otherwise not be considered in
  dependency resolution.
- BuildRequires:  libzypp-devel &gt;= 17.26.1.
- version 1.14.46</changelog>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
</package>
<package pkgid="bcd253f6368c9db236880fdc16a4349a4ffa75f008962fea47935ffbd85206db" name="zypper" arch="aarch64">
  <version epoch="0" ver="1.14.61" rel="150400.3.24.1"/>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
  <changelog author="ma@suse.de" date="1622635200">- Add hints to 'trust GPG key' prompt.
- Add report when receiving new package signing keys from a
  trusted repo (bsc#1184326)
- Added translation using Weblate (Kabyle)
- version 1.14.45</changelog>
  <changelog author="ma@suse.de" date="1623326400">- Link all executables with -pie (bsc#1186447)
- Tag PTF packages in the status column (bsc#1186503)
  Like retracted packages, a program temporary fix must be
  explicitly selected and will otherwise not be considered in
  dependency resolution.
- BuildRequires:  libzypp-devel &gt;= 17.26.1.
- version 1.14.46</changelog>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
  <changelog author="ma@suse.de" date="1686830400">- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
- version 1.14.61</changelog>
</package>
<package pkgid="b517be4af8ebe6c2343aa8181112c223803e7c54ed7e0020748f66358bcabbb6" name="zypper" arch="s390x">
  <version epoch="0" ver="1.14.61" rel="150400.3.24.1"/>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
  <changelog author="ma@suse.de" date="1622635200">- Add hints to 'trust GPG key' prompt.
- Add report when receiving new package signing keys from a
  trusted repo (bsc#1184326)
- Added translation using Weblate (Kabyle)
- version 1.14.45</changelog>
  <changelog author="ma@suse.de" date="1623326400">- Link all executables with -pie (bsc#1186447)
- Tag PTF packages in the status column (bsc#1186503)
  Like retracted packages, a program temporary fix must be
  explicitly selected and will otherwise not be considered in
  dependency resolution.
- BuildRequires:  libzypp-devel &gt;= 17.26.1.
- version 1.14.46</changelog>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
  <changelog author="ma@suse.de" date="1686830400">- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
- version 1.14.61</changelog>
</package>
<package pkgid="658c3a5bb3ecd3daac75a184894b109958b85175db1efac6933f10ae13707ac5" name="zypper" arch="src">
  <version epoch="0" ver="1.14.61" rel="150400.3.24.1"/>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
  <changelog author="ma@suse.de" date="1622635200">- Add hints to 'trust GPG key' prompt.
- Add report when receiving new package signing keys from a
  trusted repo (bsc#1184326)
- Added translation using Weblate (Kabyle)
- version 1.14.45</changelog>
  <changelog author="ma@suse.de" date="1623326400">- Link all executables with -pie (bsc#1186447)
- Tag PTF packages in the status column (bsc#1186503)
  Like retracted packages, a program temporary fix must be
  explicitly selected and will otherwise not be considered in
  dependency resolution.
- BuildRequires:  libzypp-devel &gt;= 17.26.1.
- version 1.14.46</changelog>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
  <changelog author="ma@suse.de" date="1686830400">- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
- version 1.14.61</changelog>
</package>
<package pkgid="b3e7247f97bdf60c470d180f1589e950c0e7102e5b47de64cb43695516471d79" name="zypper" arch="x86_64">
  <version epoch="0" ver="1.14.61" rel="150400.3.24.1"/>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
  <changelog author="ma@suse.de" date="1622635200">- Add hints to 'trust GPG key' prompt.
- Add report when receiving new package signing keys from a
  trusted repo (bsc#1184326)
- Added translation using Weblate (Kabyle)
- version 1.14.45</changelog>
  <changelog author="ma@suse.de" date="1623326400">- Link all executables with -pie (bsc#1186447)
- Tag PTF packages in the status column (bsc#1186503)
  Like retracted packages, a program temporary fix must be
  explicitly selected and will otherwise not be considered in
  dependency resolution.
- BuildRequires:  libzypp-devel &gt;= 17.26.1.
- version 1.14.46</changelog>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
  <changelog author="ma@suse.de" date="1686830400">- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
- version 1.14.61</changelog>
</package>
<package pkgid="467a1c18e4dcb9690d957a1729a68e3c5da3a546621f4e4afeba4235137b11a7" name="zypper-needs-restarting" arch="noarch">
  <version epoch="0" ver="1.14.60" rel="150400.3.21.2"/>
  <changelog author="ma@suse.de" date="1606478400">- Avoid translated text in xml attributes ( fixes #361 )
- BuildRequires:  libzypp-devel &gt;= 17.25.3.
  Adapt to new LoadTestcase API.
- version 1.14.41</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
  <changelog author="ma@suse.de" date="1622635200">- Add hints to 'trust GPG key' prompt.
- Add report when receiving new package signing keys from a
  trusted repo (bsc#1184326)
- Added translation using Weblate (Kabyle)
- version 1.14.45</changelog>
  <changelog author="ma@suse.de" date="1623326400">- Link all executables with -pie (bsc#1186447)
- Tag PTF packages in the status column (bsc#1186503)
  Like retracted packages, a program temporary fix must be
  explicitly selected and will otherwise not be considered in
  dependency resolution.
- BuildRequires:  libzypp-devel &gt;= 17.26.1.
- version 1.14.46</changelog>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
</package>
<package pkgid="357ba7bb3097584a59e9732656a9bec2b87aa213ae93cdeeccbf8f8110fc8b11" name="zypper-needs-restarting" arch="noarch">
  <version epoch="0" ver="1.14.61" rel="150400.3.24.1"/>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
  <changelog author="ma@suse.de" date="1622635200">- Add hints to 'trust GPG key' prompt.
- Add report when receiving new package signing keys from a
  trusted repo (bsc#1184326)
- Added translation using Weblate (Kabyle)
- version 1.14.45</changelog>
  <changelog author="ma@suse.de" date="1623326400">- Link all executables with -pie (bsc#1186447)
- Tag PTF packages in the status column (bsc#1186503)
  Like retracted packages, a program temporary fix must be
  explicitly selected and will otherwise not be considered in
  dependency resolution.
- BuildRequires:  libzypp-devel &gt;= 17.26.1.
- version 1.14.46</changelog>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
  <changelog author="ma@suse.de" date="1645704000">- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
- version 1.14.52</changelog>
  <changelog author="ma@suse.de" date="1655294400">- Basic JobReport for "cmdout/monitor".
- versioncmp: if verbose, also print the edition 'parts' which are
  compared.
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally (fixes #433)
- Honor the NO_COLOR environment variable when auto-detecting
  whether to use color (fixes #432)
- Define table columns which should be sorted natural [case
  insensitive] (fixes #391, closes #396, fixes #424)
- lr/ls: Use highlight color on name and alias as well.
- version 1.14.53</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 13 (fixes #448)
- Put signing key supplying repository name in quotes.
- version 1.14.54</changelog>
  <changelog author="ma@suse.de" date="1658318400">- lr: Allow shortening the Name column if table is wider than the
  terminal (bsc#1201638)
- Don't accepts install/remove modifier without argument
  (bsc#1201576)
- zypper-download: Set correct ExitInfoCode when failing to
  resolve argument.
- zypper-download: Handle unresolvable arguments as error.
  This commit changes zypper-download such that it behaves more
  consistent to zypper-install when an argument can't be resolved.
- version 1.14.55</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #441, fixes #444)
- Remove unneeded code to compute the PPP status.
  Since libzypp 17.23.0 the PPP status is auto established. No
  extra solver run is needed.
- Make sure 'up' respects solver related CLI options (bsc#1201972)
- Fix tests to use locale "C.UTF-8" rather than "en_US".
- Fix man page (fixes #451)
- version 1.14.56</changelog>
  <changelog author="ma@suse.de" date="1664971200">- BuildRequires:  libzypp-devel &gt;= 17.31.2.
- Fix --[no]-allow-vendor-change feedback in install command
  (bsc#1201972)
- version 1.14.57</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires:  libzypp-devel &gt;= 17.31.5
- version 1.14.58</changelog>
  <changelog author="ma@suse.de" date="1671883200">- BuildRequires:  libzypp-devel &gt;= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
  A remove command which prefers replacing dependant packages to
  removing them as well.
  A PTF is typically removed as soon as the fix it provides is
  applied to the latest official update of the dependant packages.
  But you don't want the dependant packages to be removed together
  with the PTF, which is what the remove command would do. The
  removeptf command however will aim to replace the dependant
  packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
  (bsc#1205570)
- version 1.14.59</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60</changelog>
  <changelog author="ma@suse.de" date="1686830400">- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
- version 1.14.61</changelog>
</package>
</otherdata>